Curtailing privilege escalation attacks over asynchronous channels on Android

Abstract

Recently we presented QuantDroid [7], a quantitative approach towards mitigating privilege escalation attacks on Android. By monitoring all synchronous IPC via overt channels on-the-fly, a so called flow-graph service detects an abnormal amount of traffic exchanged between DVMs running different Apps to indicate a potential horizontal privilege escalation attack. However, although certainly a valuable first step, our initial QuantDroid approach fails when dealing with asynchronous IPC via persistent storage containers on the Android system. To also address this issue, in this work we extend QuantDroid to QuantDroid ++ by providing i) a central storage of taints when operating on system-internal databases of Android, ii) an extension of the SQL cursor object to preserve taints and link requested data with such taints, and, finally iii) an inspection of the information flow with such newly available taints for all relevant database operations.

The Application of Computer Intelligence in the Cyber-Physical Business System Integration in Network Security

“…A lot of research work has been carried out [8][9][10][11][12]. In the actual business production process of an enterprise, it is not only necessary to enhance the security development awareness and code specifications of code developers, but also necessary to have good security detection for the upcoming web applications.…”

Effective Detection of Cyber Attack in a Cyber-Physical Power Grid System

“…It is also noteworthy that before now, most cyber-attacks were restricted to the IT infrastructure of critical organizations; however, with the convergence of OT and the IT infrastructure, there has been a significant shift in cyber-attacks to OT infrastructures [7] and these breaches often results in: reset of the phasor parameters, system shutdown, and disruption of the power grid system [6]. Usually, the Operating System (OS) provides the abstraction and support mechanism for the protection of hardware and application from misuse [8]; however, the cyber-attacks and threats especially, from non-state actors have assumed some level of sophistication in recent times. This therefore, makes the effective detection and prevention of cyber-attacks on the smart power grid system very important [9] [10].…”