检索结果-内蒙古大学图书馆

2024 IEEE International Students' Conference on Electrical, Electronics and Computer Science, SCEECS 2024

作者： Vinay, Mallela David Hemanth Kumar, Mandavyapuram Hemanth, Banoth Tomar, Deepak Singh Maulana Azad National Institute of Technology Department of Computer Science and Engineering Bhopal India

ISBN: (纸本)9798350348460

The development of mobile applications is increasing rapidly. Client-server architectures are common in many of these systems. IOS and android are the most commonly used operating systems for the client. Smartphones can keep any type of valuable files, including contacts, call logs, emails, location history, photographs, vedios and messages. Users' private information kept on the device can be accessed by malicious programs. android application vulnerabilities like SQL injection, XSS etc. analyze source code of security patches of widely used applications written in weak and strong types of languages. In accordance with OWASP mobile vulnerabilities, this system demonstrates the most common vulnerabilities and attacks, namely session management, broken authentication, SQL injection and insecure data storage. android security has a lot of flaws that may be exploited, and these vulnerabilities or attacks are quite efficient and vital for any application. A detailed explanation of low security and high security is given when an attack is performed in the application system. The research results demonstrate that security is only associated with just a few of software failure kinds that impact a select number of cases. By conducting a detailed analysis, the system will be able to identify existing holes in the android operating system and make the most informed decisions to make it more secure. © 2024 IEEE.

关键词： android vulnerabilities Broken Authentication Insecure Data Storage Security Session Management SQL Injection

来源：评论

学校读者我要写书评

暂无评论

Time series forecast modeling of vulnerabilities in the android operating system using ARIMA and deep learning methods

引用

SUSTAINABLE COMPUTING-INFORMATICS & SYSTEMS 2021年 30卷 100515-100515页

作者： Gencer, Kerem Basciftci, Fatih Karamanoglu Mehmetbey Univ Vocat Sch Tech Sci Dept Comp Programming Karaman Turkey Selcuk Univ Fac Technol Dept Comp Engn Konya Turkey

Security vulnerability prediction models allow estimation of the number of potential vulnerabilities and evaluation of the risks caused by these vulnerabilities. In particular, for modeling the vulnerabilities that may occur in software versions over time, it is appropriate to take the necessary countermeasures. These models are crucial in areas such as determining the number of resources required to cope with security vulnerabilities. These reported vulnerabilities, we anticipate the actions of OS companies to make strategic and operational decisions such as secure deployment. The operating system includes backup provisioning, disaster recovery. Although many vulnerability predictions models have been constructed, most of these are for operating systems and internet browsers, and non-exist for the android mobile operating system, which has the highest number of users. In contrast to other studies, the present study investigated android vulnerabilities that directly depend on time. Time series, multilayer perceptron (MLP), convolutional neural network (CNN), long short term memory (LSTM), Convolutional LSTM (ConvLSTM) and CNN-LSTM based models were generated, and the best model, providing the lowest error rates for the prediction of future security vulnerabilities, was selected. Data for the creation of the models were obtained by filtering security vulnerabilities published in the National Vulnerability Database (NVD) using the keyword android. It was observed that the LSTM model has an error rate of 26.830 and the ARIMA model has an error rate of 18.449. Finally, it has been determined that LSTM based algorithms reach error rates that can compete with classical time series models despite limited data.

关键词： LSTM Time series NVD android vulnerabilities Software security Vulnerability discovery model

来源：评论

学校读者我要写书评

暂无评论

vulnerabilities in Banking Transactions with Mobile Devices android: A Systematic Literature Review 4th

Vulnerabilities in Banking Transactions with Mobile Devices ...

引用

4th International Conference on Technology Trends (CITT)

作者： Ordonez-Ordonez, Pablo F. Herrera-Loaiza, Domingo D. Figueroa-Diaz, Roberth Univ Nacl Loja Fac Energia Ave Pio Jaramillo Alvarado La Argelia Loja Ecuador Univ Politecn Madrid ETSI Sistemas Informat Calle Alan Turing S-N Madrid 28031 Spain

ISBN: (纸本)9783030055325;9783030055318

This qualitative systematic literature review (SLR) corresponds to the search for vulnerabilities in banking transactions by means of android Intelligent mobile devices and the incidents in the users. In these devices there is leaking information that is captured by hackers and with it the dissatisfaction of users to ignore how to treat these insecurities. For this, initially of between 123 studies, 18 were selected according to the search criteria corresponding to the research questions in vulnerability and incidence, it was mainly found the bank Phishing, the injections of malware in mobile applications and to a large extent victims of bank fraud.

关键词： Mobile applications Banking transactions Software vulnerabilities Mobile vulnerabilities android vulnerabilities

来源：评论

学校读者我要写书评

暂无评论

A Dataset for Evaluating LLMs Vulnerability Repair Performance in android Applications: Data/Toolset paper 25

A Dataset for Evaluating LLMs Vulnerability Repair Performan...

引用

Proceedings of the Fifteenth ACM Conference on Data and Application Security and Privacy

作者： Elisa Braconaro Eleonora Losiouk Universita degli Studi di Padova Padua Italy

ISBN: (纸本)9798400714764

Automated Program Repair (APR) is a well-established research area that enhances software reliability and security by automatically fixing bugs, reducing manual effort, and accelerating debugging. Despite progress in publishing benchmarks to evaluate APR tools, datasets specifically targeting android are *** address this gap, we introduce a dataset of 272 real-world violations of Google's android Security Best Practices, identified by statically analyzing 113 real-world android apps. In addition to the faulty code, we manually crafted repairs based on Google's guidelines, covering 176 Java-based and 96 XML-based violations from android Java classes and Manifest files, respectively. Additionally, we leveraged our novel dataset to evaluate Large Language Models (LLMs) as they are the latest promising APR tools. In particular, we evaluated GPT-4o, Gemini 1.5 Flash and Gemini in android Studio and we found that GPT-4o outperforms Google's models, demonstrating higher accuracy and robustness across a range of violations types. Hence, with this dataset, we aim to provide valuable insights for advancing APR research and improving tools for android security.

关键词： android vulnerabilities

来源：评论

学校读者我要写书评

暂无评论

Security Library for Safe Data Storage on android Platform 20

Security Library for Safe Data Storage on Android Platform

引用

20th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (IEEE TrustCom)

作者： Poniszewska-Maranda, Aneta Rogozinski, Lukasz Maranda, Witold Lodz Univ Technol Inst Informat Technol Lodz Poland Lodz Univ Technol Dept Microelect & Comp Sci Lodz Poland

ISBN: (纸本)9781665416580

Smartphones have become an integral part of everyday human life. In addition to the usual activities such as phone calls and text messages, users are increasingly turning to e-banking, e-commerce or healthcare. The android operating system offers a number of mechanisms and good practices related to the creation of secure applications, but research shows that there are still many vulnerabilities. The paper contains an overview of the currently existing methods of securing data stored on the android platform, threats related to the discussed system and a proposition for their elimination in the form of the android Secure library, which facilitates the management of dangerous application rights, validation of data entered and provides an additional layer of security using one-time password or device location. The proposed solution eliminates only selected problems that the android system has, but of course the best form of security is a qualified team creating the application and users' awareness of existing threats.

关键词： android operating system data security data storage android vulnerabilities android secure library

来源：评论

学校读者我要写书评

暂无评论

Analysis of Latest vulnerabilities in android

Analysis of Latest Vulnerabilities in Android

引用

International Conference on Advances in Computing, Communications and Informatics (ICACCI)

作者： Umasankar Indian Inst Informat Technol & Management Kerala Knowledge Ctr Software Engn & Project Management Trivandrum Kerala India

ISBN: (纸本)9781509063673

Alongside the fast development of new science and innovation, the elements of Smart gadgets like Smart Phones, Smart TV, smart watches smart home appliances, IoT devices etc. turn out to be increasingly powerful and are playing a basic part in the day today world. Operating systems like android, iOS, Windows, Blackberry so on gives an operating environment for the Smart devices [1]. android, a Linux kernel based open source operating system developed by Google Inc. is the most popular and largest installed base, worldwide on smart gadgets. android is now also providing operating platform for IoT devices called android things. Even though it brings great convenience to people, it possesses security and privacy issues. Malicious applications have become a big threat to the mobile security, exploiting various vulnerabilities in platform and they are emerging new variants by exploiting new zero days. Thus, an efficient security analysis and effective detection method is important and necessary to avoid loss of privacy and security of data which may lead to various impact on individuals and organizations depending on severity of the malicious application. A proper security analysis by scanning various vulnerabilities present in android platform is performed in this work We also create a framework for proper security analysis of android platform and applications to find vulnerabilities and malicious applications. Here the framework for security analysis is created with OWASP Droid Fusion and data's collected for security analysis is from National Vulnerability Database (NVD) and OWASP Mobile Top 10.

关键词： android vulnerabilities OWASP android Things OSVDB android Security

来源：评论

学校读者我要写书评

暂无评论

Review of Sensitive Data Leakage through android Applications in a Bring Your Own Device (BYOD) Workplace

Review of Sensitive Data Leakage through Android Application...

引用

IST-Africa Week Conference (IST-Africa)

作者： Morolong, Mamoqenelo Gamundani, Attlee Bhunu Shava, Fungai NUST 13 Jackson Kaujeua St Windhoek 9000 Namibia

ISBN: (纸本)9781905824632

Researchers reveal that personal computers are not exclusively liable to attacks. Mobile devices have become the very best target due to the fact that, they are largely accustomed to performing numerous activities. Email communication, sending and receiving text messages, installation of monetary applications (apps) such as mobile banking apps and Bring Your Own Device (BYOD) adoption in enterprises for work-related functions are among others. Literature review establishes that attackers of mobile devices gather sensitive user and enterprise data, which they use for blackmailing or for amerceable monetary gains. As the subsequent result of mobile app protection and android vulnerability concerns, researchers and practitioners are evaluating the impact the security of android mobile device has on enterprise and personal data. This paper reviews the extent of data leakage through android devices in a BYOD enabled environment, android application security model and BYOD benefits and risks using desktop review as the methodology.

关键词： android vulnerabilities android device security BYOD data leakage mobile security

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：