Android Data Storage Locations and What App Developers Do with It from a Security and Privacy Perspective

Kris Heid, Tobias Tefke, Tobias Tefke, Jens Heider, Ralf Staudemeyer

2022

Abstract

Many Android apps handle and store sensible data on the smartphone, such as for example passwords, API keys or messages. This information must of course be protected and thus more and more protected storage options and storage isolation techniques were implemented in recent Android version. This results in good security and privacy mechanisms provided to Android developers. However, the question is how well these measures are implemented in todays apps. In this publication, we are presenting an automated dynamic analysis environment which we use to analyze the top 1000 Android apps. Filesystem API accesses of these apps are evaluated and judged how well Android’s protected storage locations are leveraged or abused.

Paper Citation

in Harvard Style

Heid K., Tefke T., Heider J. and Staudemeyer R. (2022). Android Data Storage Locations and What App Developers Do with It from a Security and Privacy Perspective. In Proceedings of the 8th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP, ISBN 978-989-758-553-1, pages 378-387. DOI: 10.5220/0010838200003120

in Bibtex Style

@conference{icissp22,
author={Kris Heid and Tobias Tefke and Jens Heider and Ralf Staudemeyer},
title={Android Data Storage Locations and What App Developers Do with It from a Security and Privacy Perspective},
booktitle={Proceedings of the 8th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,},
year={2022},
pages={378-387},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0010838200003120},
isbn={978-989-758-553-1},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 8th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,
TI - Android Data Storage Locations and What App Developers Do with It from a Security and Privacy Perspective
SN - 978-989-758-553-1
AU - Heid K.
AU - Tefke T.
AU - Heider J.
AU - Staudemeyer R.
PY - 2022
SP - 378
EP - 387
DO - 10.5220/0010838200003120