Signing key leak detection in Google Play Store

扫码查看

原文链接

NETL

外文摘要：Developers use their private keys to sign the apps before publishing in Google Play Store， an Official Android Market。 These keys must be kept secret as they uniquely identify the authority of a developer。 We conduct an investigation on more than 21000 real malware and 1000 benign apps in Google Play Store to justify whether the private keys of these benign apps have been manipulated by malware。 As a result， 15 apps are found vulnerable due to the leakage of private keys。 We also confirm the attacking technique that uses similar package name in third party apps to lure users to install malware without notice。

外文关键词：

android securitymobile malwarephishing attack

作者：

Long Nguyen-Vu、Jungsoo Park、Ngoc-Tu Chau、Souhwan Jung

展开 >

作者单位：

School of Electronic Engineering, Soongsil Univertity, Seoul, Korea

会议名称：

International Conference on Information Networking

会议地点：

Kota Kinabalu(MY)

会议母体文献：

2016 International Conference on Information Networking

页码：

13-16

出版时间：

2016

DOI：

10.1109/ICOIN.2016.7427066