安卓平台下基于WebView的攻击及防御机制

发布时间：2018-10-20 11:35

【摘要】：WebView在安卓和iOS平台上都是很重要的组件，它使得智能手机和平板电脑的应用(apps)都能内嵌一个简单但是强大的浏览器在其中。为了满足应用和其内嵌浏览器的很好交互，WebView提供了很多APIs（应用程序编程接口），允许应用的java代码调用网页中的javascript代码，，允许获取对方的事件信息或更改他们的事件，反之依然可行。使用这些特性，应用能够为了他们所期望的网络用途而成为一种专有化的浏览器。现如今，在安卓市场中，在十种不同分类下的排名前20的应用中，接近90%都使用WebView。 WebView的设计改变了Web的发展现状，尤其是在安全方面。WebView和其APIs的使用，使得Web安全基础架构中两个基本的方面被削弱：分别是客户端的TCB（可信计算基）和浏览器端的sandbox（沙盒保护）。我们把WebView的APIs分为两类，分别是基于Web的APIs和基于UI的APIs，我们分别研究使用这两类APIs的攻击手段。随后我们研究针对WebView攻击的最根本问题所在，并制定了一个通用模型，我们称之为容器威胁模型。我们认为造成这种攻击可行的原因在于系统没能保护它的视觉完整性。从这个角度来说，我们研究了现有的对策，并给出一个通用的解决方案，制定一个类似TCB的方法来解决这个问题，我们称之为TDB（可信显示基）。我们使用边信道来传递丢失的视觉信息给用户。从访问控制的角度来看，我们使用动态的绑定策略模型，使服务器可以根据客户端情境的不同执行不同的限制措施。本文的主要研究成果如下： 1.对基于WebView的攻击进行归纳分析总结； 2.提出一种容器威胁模型，并尝试在安卓平台上对抗这种攻击模型。 3.在安卓平台使用边信道来给用户传递丢失的视觉信息，并提出一个新型的动态绑定策略模型来阻止针对视觉完整性的攻击。
[Abstract]:WebView is an important component on both Android and iOS, allowing (apps), a smartphone and tablet app, to embed a simple but powerful browser in it. To satisfy the good interaction between an application and its embedded browser, WebView provides a number of APIs (Application programming Interface) that allow the application's java code to invoke the javascript code in the Web page, get the other party's event information, or change their events. Vice versa is still feasible. With these features, applications can become a proprietary browser for their desired network use. Today, in the Android market, nearly 90 percent of the top 20 apps in 10 different categories use WebView. WebView designs to change the status quo of Web, especially in terms of security. WebView and its APIs. Two basic aspects of Web security infrastructure are weakened: client TCB (trusted Computing Base) and browser-side sandbox (sandboxie protection). We divide the APIs of WebView into two categories, that is, APIs based on Web and APIs, based on UI. Then we study the most fundamental problem of WebView attack, and develop a general model, which we call container threat model. We believe that this attack is possible because the system fails to protect its visual integrity. From this point of view, we study the existing countermeasures, and give a general solution, develop a similar TCB method to solve this problem, we call it TDB (trusted display Base). We use edge channels to transmit lost visual information to the user. From the point of view of access control, we use a dynamic binding policy model to enable the server to perform different restrictions according to client scenarios. The main research results of this paper are as follows: 1. The attack based on WebView is summarized. 2. Propose a container threat model and try to counter it on Android. 3. 3. Side channels are used to transmit lost visual information to users on Android platform, and a new dynamic binding strategy model is proposed to prevent attacks against visual integrity.
【学位授予单位】：西安电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【相似文献】