ID 61416
FullText URL
fulltext.pdf 1.45 MB
Author
Imamura, Yuta Graduate School of Natural Science and Technology, Okayama University
Orito, Rintaro Graduate School of Natural Science and Technology, Okayama University
Uekawa, Hiroyuki Graduate School of Natural Science and Technology, Okayama University
Chaikaew, Kritsana Faculty of Engineering, Kasetsart University
Leelaprute, Pattara Faculty of Engineering, Kasetsart University
Sato, Masaya Graduate School of Natural Science and Technology ORCID Kaken ID publons researchmap
Yamauchi, Toshihiro Graduate School of Natural Science and Technology, Okayama University ORCID Kaken ID publons researchmap
Abstract
Many Android apps employ WebView, a component that enables the display of web content in the apps without redirecting users to web browser apps. However, WebView might also be used for cyberattacks. Moreover, to the best of our knowledge, although some countermeasures based on access control have been reported for attacks exploiting WebView, no mechanism for monitoring web access via WebView has been proposed and no analysis results focusing on web access via WebView are available. In consideration of this limitation, we propose a web access monitoring mechanism for Android WebView to analyze web access via WebView and clarify attacks exploiting WebView. In this paper, we present the design and implementation of this mechanism by modifying Chromium WebView without any modifications to the Android framework or Linux kernel. The evaluation results of the performance achieved on introducing the proposed mechanism are also presented here. Moreover, the result of threat analysis of displaying a fake virus alert while browsing websites on Android is discussed to demonstrate the effectiveness of the proposed mechanism.
Keywords
Android
WebView
Web access monitoring
Web security
Threat analysis
Fake virus alert
Published Date
2021-01-19
Publication Title
International Journal of Information Security
Publisher
Springer
ISSN
1615-5262
NCID
AA11872752
Content Type
Journal Article
language
英語
OAI-PMH Set
岡山大学
Copyright Holders
© The Author(s) 2021
File Version
publisher
DOI
Web of Science KeyUT
Related Url
isVersionOf https://doi.org/10.1007/s10207-020-00534-3
License
http://creativecommons.org/licenses/by/4.0/