Top

Published in:

2016 | OriginalPaper | Chapter

A Feasible No-Root Approach on Android

Authors : Yao Cheng, Yingjiu Li, Robert H. Deng

Published in: Information Security and Privacy

Publisher: Springer International Publishing

Activate our intelligent search to find suitable subject content or patents.

search-config

AI-assisted search

Off

Abstract

Root is the administrative privilege on Android, which is however inaccessible on stock Android devices. Due to the desire for privileged functionalities and the reluctance of rooting their devices, Android users seek for no-root approaches, which provide users with part of root privileges without rooting their devices. In this paper, we newly discover a feasible no-root approach based on the ADB loopback. To ensure such no-root approach is not misused proactively, we examine its dark side, including privacy leakage via logs and user input inference. Finally, we discuss the solutions and suggestions from different perspectives.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

inform now

previous chapter Pseudonymous Signature on eIDAS Token – Implementation Based Privacy Threats

next chapter Improved Classification of Known and Unknown Network Traffic Flows Using Semi-supervised Machine Learning

In practice, ADB server is implemented in the same binary as ADB client.

The existing no-root approach could lead to privacy leakage due to the insecure socket communication between the no-root app and its native service [7].

Helium - app sync and backup. https://play.google.com/store/apps/details?id=com.koushikdutta.backup

Clockworkmod tether (no root). https://play.google.com/store/apps/details?id=com.koushikdutta.tether

No root screenshot it. https://play.google.com/store/apps/details?id=com.edwardkim.android.screenshotitfullnoroot

Android debug bridge. http://developer.android.com/tools/help/adb.html

Platform versions distrubution. http://developer.android.com/about/dashboards/index.html

Shell permissions on android. https://android.googlesource.com/platform/frameworks/base/+/android-5.1.0_r5/packages/Shell/AndroidManifest.xml

Lin, C.-C., Li, H., Zhou, X., Wang, X.F.: Screenmilker: How to milk your android screen for secrets. In: NDSS (2014)

Log. http://developer.android.com/reference/android/util/Log.html

Lineberry, A., Richardson, D.L., Wyatt, T.: These aren’t the permissions you’re looking for (2010). https://www.defcon.org/images/defcon-18/dc-18-presentations/Lineberry/DEFCON-18-Lineberry-Not-The-Permissions-You-Are-Looking-For.pdf

10.

Snapchat. https://play.google.com/store/apps/details?id=com.snapchat.android

11.

Flurry. http://www.flurry.com/

12.

Getevent. https://source.android.com/devices/input/getevent.html

13.

Android and security. http://googlemobile.blogspot.sg/2012/02/android-and-security.html

14.

Vidas, T., Votipka, D., Christin, N.: All your droid are belong to us: a survey of current android attacks. In: WOOT, pp. 81–90 (2011)

15.

Windows malware attempts to infect android devices. http://www.symantec.com/connect/blogs/windows-malware-attempts-infect-android-devices

16.

Hwang, S., Lee, S., Kim, Y., Ryu, S.: Bittersweet adb: Attacks and defenses. In: Proceedings of the 10th ACM Symposium on Information, Computer and Communications Security, pp. 579–584 (2015)

Title: A Feasible No-Root Approach on Android
Authors: Yao Cheng
Yingjiu Li
Robert H. Deng
Publisher: Springer International Publishing
Book: Information Security and Privacy
Print ISBN: 978-3-319-40366-3

Electronic ISBN: 978-3-319-40367-0

Copyright Year: 2016
DOI: https://doi.org/10.1007/978-3-319-40367-0_32

Springer Professional

Abstract

Please log in to get access to your license.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"

Premium Partner