@inproceedings{ac2d6d1d5be14c05879fa3e7ba03cc44,
title = "Access control for plugins in cordova-based hybrid applications",
abstract = "Hybrid application frameworks such as Cordovaallow mobile application (app) developers to create platformindependent apps. The code is written in JavaScript, with special APIs to access device resources in a platform-agnostic way. In this paper, we present a novel app-repackaging attack that repackages hybrid apps with malicious code, this code can exploit Cordova's plugin interface to tamper with device resources. We further demonstrate a defense against this attack through the use of a novel runtime access control mechanism that restricts access based on the mobile user's judgement. Our mechanism is easy to introduce to existing Cordova apps, and allows developers to produce apps that are resistant to app-repackaging attacks.",
keywords = "Access Control, Android, Hybrid Applications",
author = "Naoki Kudo and Toshihiro Yamauchi and Austin, {Thomas H.}",
note = "Publisher Copyright: {\textcopyright} 2017 IEEE.; 31st IEEE International Conference on Advanced Information Networking and Applications, AINA 2017 ; Conference date: 27-03-2017 Through 29-03-2017",
year = "2017",
month = may,
day = "5",
doi = "10.1109/AINA.2017.61",
language = "English",
series = "Proceedings - International Conference on Advanced Information Networking and Applications, AINA",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "1063--1069",
editor = "Tomoya Enokido and Hui-Huang Hsu and Chi-Yi Lin and Makoto Takizawa and Leonard Barolli",
booktitle = "Proceedings - 31st IEEE International Conference on Advanced Information Networking and Applications, AINA 2017",
}