Projects per year
Abstract
Many applications for Android and iOS process sensitive data and, therefore, rely on cryptographic APIs natively provided by the operating system. For this to be effective, essential rules need to be obeyed, as otherwise the attainable level of security would be weakened or entirely defeated. In this paper, we inspect the differences between Android and iOS concerning the proper usage of platform-specific APIs for cryptography. For both platforms, we present concrete strategies to detect critical mistakes and introduce a new framework for Android that excels in pinpointing the origin of problematic security attributes. Applied on real-world apps with cryptography, we find that out of 775 investigated apps that vendors distribute for both Android and iOS, 604 apps for iOS (78%) and 538 apps for Android (69%) suffer from at least one security misconception.
Original language | English |
---|---|
Title of host publication | Proceedings of the 16th International Joint Conference on e-Business and Telecommunications - Volume 2: SECRYPT |
Place of Publication | Portugal |
Publisher | SciTePress |
Pages | 96-108 |
Number of pages | 12 |
ISBN (Electronic) | 978-989-758-378-0, |
DOIs | |
Publication status | Published - 2019 |
Event | 16th International Conference on Security and Cryptography: SECRYPT 2019 - Prague, Czech Republic Duration: 26 Jul 2019 → 28 Jul 2019 http://www.secrypt.icete.org/?y=2019 |
Conference
Conference | 16th International Conference on Security and Cryptography |
---|---|
Abbreviated title | SECRYPT 2019 |
Country/Territory | Czech Republic |
City | Prague |
Period | 26/07/19 → 28/07/19 |
Internet address |
Keywords
- Static Analysis
- Slicing
- Android
- iOS
- Cryptography
- Application Security
Fingerprint
Dive into the research topics of 'A Comparative Study of Misapplied Crypto in Android and iOS Applications'. Together they form a unique fingerprint.Projects
- 1 Active
-
A-SIT - Secure Information Technology Center Austria
Stranacher, K., Dominikus, S., Leitold, H., Marsalek, A., Teufl, P., Bauer, W., Aigner, M. J., Rössler, T., Neuherz, E., Dietrich, K., Zefferer, T., Mangard, S., Payer, U., Orthacker, C., Lipp, P., Reiter, A., Knall, T., Bratko, H., Bonato, M., Suzic, B., Zwattendorfer, B., Kreuzhuber, S., Oswald, M. E., Tauber, A., Posch, R., Bratko, D., Feichtner, J., Ivkovic, M., Reimair, F., Wolkerstorfer, J. & Scheibelhofer, K.
21/05/99 → 31/12/24
Project: Research area