一句话：提出 TDroid，利用控制流特化暴露 Android 多任务机制中的应用切换攻击。
Android 多任务机制可能遭受应用切换攻击：恶意应用将当前焦点应用栈顶的合法 activity 替换为自己的 activity，从而实施钓鱼、拒绝服务等攻击。现有市场级防御效果有限，静态分析难以推断应用意图，动态分析覆盖率低。TDroid 采用控制流特化（control flow specialization）来暴露此类攻击，但摘要未展开具体技术细节与实验评估，仅指出既有防御的不足并概述该方向。
The Android multitasking mechanism can be plagued with app switching attacks, in which a malicious app replaces the legitimate top activity of the focused app with one of its own, thus mounting, e.g., phishing and denial-of-service attacks. Existing market-level defenses are still ineffective, as static analysis is fundamentally unable to reason about the intention of an app and dynamic analysis has low coverage.
DOI 原文 ·
@inproceedings{paperbot4709,
title = {TDroid: exposing app switching attacks in Android with control flow specialization},
author = {Jie Liu and Diyu Wu and Jingling Xue},
booktitle = {ASE},
year = {2018},
doi = {10.1145/3238147.3238188}
}