Bifocals: Analyzing WebView Vulnerabilities in Android Applications

No abstract is available for this paper.

• Publication year

  2013

• Venue

  Web Information System and Application Conference

• Publication date

  2013-08-19

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1007/978-3-319-05149-9_9
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Automated security certification of Android application

  2013cited by this paper
• You are what you include: large-scale evaluation of remote javascript inclusions

  2012cited by this paper
• Systematic Detection of Capability Leaks in Stock Android Smartphones

  2012cited by this paper
• Stack Overflow

  2012cited by this paper
• AdDroid: privilege separation for applications and advertisers in Android

  2012cited by this paper
• Predicting vulnerable classes in an Android application

  2012cited by this paper
• ScanDal: Static Analyzer for Detecting Privacy Leaks in Android Application

  2012cited by this paper
• A Study of Android Application Security

  2011cited by this paper
• Short paper: a look at smartphone permission models

  2011cited by this paper
• Permission Re-Delegation: Attacks and Defenses

  2011cited by this paper
• Android permissions demystified

  2011cited by this paper
• Analyzing inter-application communication in Android

  2011cited by this paper
• Using static analysis for automatic assessment and mitigation of unwanted and malicious activities within Android applications

  2011cited by this paper
• Attacks on WebView in the Android system

  2011influential reference
• No Plan Survives Contact: Experience with Cybercrime Measurement

  2011cited by this paper
• Static Analysis of Executables for Collaborative Malware Detection on Android

  2009cited by this paper
• SCanDroid: Automated Security Certification of Android

  2009cited by this paper
• Noxes: a client-side solution for mitigating cross-site scripting attacks

  2006cited by this paper
• Finding Security Vulnerabilities in Java Applications with Static Analysis

  2005cited by this paper
• Static Analysis for Security

  2004cited by this paper
• Identifying cross site scripting vulnerabilities in Web applications

  2004cited by this paper
• The Evolution of Cross Site Scripting Attacks

  2002cited by this paper
• A First Step Towards Automated Detection of Buffer Overrun Vulnerabilities

  2000cited by this paper

• Open Access Alert: Studying the Privacy Risks in Android WebView's Web Permission Enforcement

  2025influential citation
• Deep Dive into In-app Browsers: Uncovering Hidden Pitfalls in Certificate Validation

  2025cites this paper
• WebViewJSdetect: Javascript vulnerability detection in android webview via coverage-guided thread-adaptive concurrent abstract interpretation

  2025cites this paper
• Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels

  2025cites this paper
• Challenges of Multilingual Program Specification and Analysis

  2024cites this paper
• Exploring Permission Control Flaws in Mini-apps

  2024cites this paper
• Common Security Vulnerabilities in Android Apps: a Comprehensive Guide

  2024influential citation
• Tabbed Out: Subverting the Android Custom Tab Security Model

  2024cites this paper
• Sistem Informasi E-Ilang Berbasis Web Studi Kasus di PT. PJB Services

  2024cites this paper
• Sistem Informasi Manajemen Pengelolaan Keuangan Masjid Berbasis Android Webview

  2024cites this paper
• PhishinWebView: Analysis of Anti-Phishing Entities in Mobile Apps with WebView Targeted Phishing

  2024cites this paper
• The Dark Forest: Understanding Security Risks of Cross-Party Delegated Resources in Mobile App-in-App Ecosystems

  2024cites this paper
• Keep Me Updated: An Empirical Study on Embedded JavaScript Engines in Android Apps

  2024cites this paper
• No Privacy Among Spies: Assessing the Functionality and Insecurity of Consumer Android Spyware Apps

  2023cites this paper
• Security and Privacy of Digital Mental Health: An Analysis of Web Services and Mobile Apps

  2023cites this paper
• I Still Know What You Watched Last Sunday: Privacy of the HbbTV Protocol in the European Smart TV Landscape

  2023cites this paper
• Demand-driven Information Flow Analysis of WebView in Android Hybrid Apps

  2023cites this paper
• Identity Confusion in WebView-based Mobile App-in-app Ecosystems

  2022cites this paper
• Not Your Average App: A Large-scale Privacy Analysis of Android Browsers

  2022cites this paper
• Analysis of Payment Service Provider SDKs in Android

  2022cites this paper
• Achieving Resource-centric Access Control for Web-app Interactions on Android

  2022cites this paper
• Understanding the Evolution of Android App Vulnerabilities

  2021cites this paper
• Vulnerabilities in Android webview objects: Still not the end!

  2021cites this paper
• Exposed! A case study on the vulnerability-proneness of Google Play Apps

  2021cites this paper
• ReACt: A Resource-centric Access Control System for Web-app Interactions on Android

  2021cites this paper
• Understanding JavaScript Vulnerabilities in Large Real-World Android Applications

  2020influential citation
• Understanding and Mitigating Threats from Android Hybrid Apps Using Machine Learning

  2020cites this paper
• All your app links are belong to us: understanding the threats of instant apps based attacks

  2020cites this paper
• OAuth 2.0

  2020cites this paper
• A Large Scale Analysis of Android-Web Hybridization

  2020cites this paper
• Vulnerability Detection on Android Apps–Inspired by Case Study on Vulnerability Related With Web Functions

  2020cites this paper
• Analyzing User Awareness on Security in Android Smartphone Devices

  2019cites this paper
• DroidCap: OS Support for Capability-based Permissions in Android

  2019cites this paper
• App in the Middle

  2019cites this paper
• Droids in Disarray: Detecting Frame Confusion in Hybrid Android Apps

  2019cites this paper
• Raising the Bar Really High: An MTD Approach to Protect Data in Embedded Browsers

  2019influential citation
• (Short Paper) Method for Preventing Suspicious Web Access in Android WebView

  2019cites this paper
• Iframes/Popups Are Dangerous in Mobile WebView: Studying and Mitigating Differential Context Vulnerabilities

  2019cites this paper
• LUDroid: A Large Scale Analysis of Android – Web Hybridization

  2019cites this paper
• When Web Meets Mobile: Novel Security Threats and Defenses in Web/Mobile Hybrid Apps

  2019cites this paper
• Let me Join Two Worlds! Analyzing the Integration of Web and Native Technologies in Hybrid Mobile Apps

  2018cites this paper
• Vulnerability in Android Development

  2018cites this paper
• Automated Generation of Event-Oriented Exploits in Android Hybrid Apps

  2018cites this paper
• An Empirical Study of Web Resource Manipulation in Real-world Mobile Applications

  2018cites this paper
• Automated Generation of Event-Oriented Exploits in Android Hybrid Apps.

  2018cites this paper
• Study and Mitigation of Origin Stripping Vulnerabilities in Hybrid-postMessage Enabled Mobile Applications

  2018cites this paper
• A Tale of Two Cities: How WebView Induces Bugs to Android Applications

  2018cites this paper
• Are free Android app security analysis tools effective in detecting known vulnerabilities?

  2018cites this paper
• The Rise of the Citizen Developer: Assessing the Security Impact of Online App Generators

  2018cites this paper
• OAuth-SSO: A Framework to Secure the OAuth-Based SSO Service for Packaged Web Applications

  2018cites this paper
• Hindsight: Understanding the Evolution of UI Vulnerabilities in Mobile Browsers

  2017influential citation
• Unleashing the Walking Dead: Understanding Cross-App Remote Infections on Mobile WebViews

  2017cites this paper
• Detection of Vulnerabilities Caused by WebView Exploitation in Smartphone

  2017cites this paper
• Efficient Permission-Aware Analysis of Android Apps

  2017influential citation
• Measuring the Insecurity of Mobile Deep Links of Android

  2017cites this paper
• When Android Apps Open Ports to Handle Network Requests: Functionality or Security Vulnerability?

  2017cites this paper
• A Taxonomy and Qualitative Comparison of Program Analysis Techniques for Security Assessment of Android Software

  2017cites this paper
• Secure Integration of Web Content and Applications on Commodity Mobile Operating Systems

  2017cites this paper
• Proposing and Testing New Security Cue Designs for OAuth-WebView-Embedded Mobile Applications

  2017cites this paper
• BabelView: Evaluating the Impact of Code Injection Attacks in Mobile Webviews

  2017influential citation
• Mining Security Risks from Massive Datasets

  2017cites this paper
• A survey on security issues, vulnerabilities and attacks in Android based smartphone

  2017cites this paper
• Precisely and Scalably Vetting JavaScript Bridge in Android Hybrid Apps

  2017cites this paper
• Security Analysis of OnlineCabBooking Android Application

  2017cites this paper
• Risk Analysis of Exposed Methods to JavaScript in Hybrid Apps

  2016cites this paper
• Quantifying and improving the efficiency of hardware-based mobile malware detectors

  2016cites this paper
• A survey of privacy protection techniques for mobile devices

  2016cites this paper
• Automatic permission inference for hybrid mobile apps

  2016cites this paper
• Toward Engineering a Secure Android Ecosystem

  2016cites this paper
• EMMA: A New Platform to Evaluate Hardware-based Mobile Malware Analyses

  2016cites this paper
• Fine-grained access control for hybrid mobile applications in Android using restricted paths

  2016cites this paper
• Hardening the OAuth-WebView Implementations in Android Applications by Re-Factoring the Chromium Library

  2016cites this paper
• Target Fragmentation in Android Apps

  2016influential citation
• Draco: A System for Uniform and Fine-grained Access Control for Web Code on Android

  2016influential citation
• SoK: Lessons Learned from Android Security Research for Appified Software Platforms

  2016cites this paper
• Web-to-Application Injection Attacks on Android: Characterization and Detection

  2015cites this paper
• Survey on Privacy Protection of Android Devices

  2015cites this paper
• A Low Overhead Prevention of Android WebView Abuse Attacks

  2015cites this paper
• A game of Droid and Mouse: The threat of split-personality malware on Android

  2015cites this paper
• Supplementary Event-Listener Injection Attack in Smart Phones

  2015cites this paper
• Remarks on Smart Watch Security Vulnerability and Solution

  2015cites this paper
• Detecting file:// and exposed component vulnerabilities in Android apps

  2015cites this paper
• DroidCIA: A Novel Detection Method of Code Injection Attacks on HTML5-Based Mobile Apps

  2015cites this paper
• Indirect File Leaks in Mobile Applications

  2015cites this paper
• Rethinking Security of Web-Based System Applications

  2015cites this paper
• A Large-Scale Study of Mobile Web App Security

  2015cites this paper
• Isolating and Restricting Client-Side JavaScript

  2015cites this paper
• Cross-Platform Analysis of Indirect File Leaks in Android and iOS Applications

  2015cites this paper
• Code Injection Attacks on HTML5-based Mobile Apps

  2014cites this paper
• Towards High Assurance HTML5 Applications

  2014cites this paper
• Code Injection Attacks on HTML5-based Mobile Apps: Characterization, Detection and Mitigation

  2014cites this paper
• Analyzing Android Browser Apps for file: // Vulnerabilities

  2014cites this paper
• Reducing Attack Surface on Cordova-based Hybrid Mobile Apps

  2014cites this paper
• VULNERABILITY DETECTION IN SOFTWARE APPLICATIONS USING STATIC CODE ANALYSIS

  year unknowncites this paper
• The Bridge between Web Applications and Mobile Platforms is Still Broken

  year unknowncites this paper