arrow
返回

Mobile cloud security: An adversary model for lightweight browser security

delete2017-01-01
delete11
PRE
AI
S
Shasi Pokharel
K
Kim‐Kwang Raymond Choo *
J
Jixue Liu
DOI:10.1016/j.csi.2016.09.002delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Lightweight browsers on mobile devices are increasingly been used to access cloud services and upload / view data stored on the cloud, due to their faster resource loading capabilities. These browsers use client side efficiency measures such as larger cache storage and fewer plugins. However, the impact on data security of such measures is an understudied area. In this paper, we propose an adversary model to examine the security of lightweight browsers. Using the adversary model, we reveal previously unpublished vulnerabilities in four popular light browsers, namely: UC Browser, Dolphin, CM Browser, and Samsung Stock Browser, which allows an attacker to obtain unauthorized access to the user's private data. The latter include browser history, email content, and bank account details. For example, we also demonstrate that it is possible to replace the images of the cache in one of the browsers, which can be used to facilitate phishing and other fraudulent activities. By identifying the design flaw in these browsers (i.e. improper file storage), we hope that future browser designers can avoid similar errors. (C) 2016 Elsevier B.V. All rights reserved.
Keyword:
Mobile cloud security
Lightweight browser security
UC Browser
Dolphin
CM Browser
Samsung Stock Browser
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

C
Computer Standards and Interfaces
IF:
3.1
论文数:
2.3K
被引数:
2.0K

机构

U
University of South Australia
学者数:
9.0K
论文数: 1.1W
被引数: 1.6W
引用论文

引用论文

err分享
err收藏
err分享
err收藏
Front-Mediated Melting of Isotropic Ultrastable Glasses
err2019-10-23
err0
errOAAI
errElijah Flenner; Ludovic Berthier; Patrick Charbonneau; Christopher J. Fullerton
err分享
err收藏
Man-in-the-browser-cache: Persisting HTTPS attacks via browser cache poisoning
err2015-11-01
err36
PREAI
errJia, Yaoqi; Chen, Yue; Dong, Xinshu; Saxena, Prateek; Mao, Jian; Liang, Zhenkai
err分享
err收藏
Exfiltrating data from Android devices
err2015-02-01
err65
PREAI
errDo, Quang; Martini, Ben; Choo, Kim-Kwang Raymond
err分享
err收藏
Real-Time Communications Security on the Web
err2014-11-01
err3
errOAAI
errDesmet, Lieven; Johns, Martin
err分享
err收藏
学者 查看更多内容