Abstract
WebView is commonly used by applications on the Android OS. Given that WebView is used as a browsing component on applications, they can be attacked via the web. Existing security mechanisms mainly focus on web browsers; hence, securing WebView is an important challenge. We proposed and implemented a method for preventing suspicious web access in Android WebView. Attackers distribute their malicious content including malicious applications, potentially unwanted programs, and coin miners, by inserting contents into a web page. Because loading malicious content involves HTTP communication, our proposed method monitors HTTP communication by WebView and blocks suspicious web accesses. To apply the proposed method to widely used applications, we implemented our method inside WebView. We also evaluated the proposed method with some popular applications and confirmed that the method can block designated web content without impeding the functionality of applications.
| Original language | English |
|---|---|
| Title of host publication | Advances in Information and Computer Security - 14th International Workshop on Security, IWSEC 2019, Proceedings |
| Editors | Nuttapong Attrapadung, Takeshi Yagi |
| Publisher | Springer Verlag |
| Pages | 241-250 |
| Number of pages | 10 |
| ISBN (Print) | 9783030268336 |
| DOIs | |
| Publication status | Published - Jan 1 2019 |
| Event | 14th International Workshop on Security, IWSEC 2019 - Tokyo, Japan Duration: Aug 28 2019 → Aug 30 2019 |
Publication series
| Name | Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) |
|---|---|
| Volume | 11689 LNCS |
| ISSN (Print) | 0302-9743 |
| ISSN (Electronic) | 1611-3349 |
Conference
| Conference | 14th International Workshop on Security, IWSEC 2019 |
|---|---|
| Country | Japan |
| City | Tokyo |
| Period | 8/28/19 → 8/30/19 |
Fingerprint
Keywords
- Android
- Content blocking
- HTTP communication
- Web access
- WebView
ASJC Scopus subject areas
- Theoretical Computer Science
- Computer Science(all)
Cite this
(Short Paper) method for preventing suspicious web access in android WebView. / Sato, Masaya; Imamura, Yuta; Orito, Rintaro; Yamauchi, Toshihiro.
Advances in Information and Computer Security - 14th International Workshop on Security, IWSEC 2019, Proceedings. ed. / Nuttapong Attrapadung; Takeshi Yagi. Springer Verlag, 2019. p. 241-250 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 11689 LNCS).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
}
TY - GEN
T1 - (Short Paper) method for preventing suspicious web access in android WebView
AU - Sato, Masaya
AU - Imamura, Yuta
AU - Orito, Rintaro
AU - Yamauchi, Toshihiro
PY - 2019/1/1
Y1 - 2019/1/1
N2 - WebView is commonly used by applications on the Android OS. Given that WebView is used as a browsing component on applications, they can be attacked via the web. Existing security mechanisms mainly focus on web browsers; hence, securing WebView is an important challenge. We proposed and implemented a method for preventing suspicious web access in Android WebView. Attackers distribute their malicious content including malicious applications, potentially unwanted programs, and coin miners, by inserting contents into a web page. Because loading malicious content involves HTTP communication, our proposed method monitors HTTP communication by WebView and blocks suspicious web accesses. To apply the proposed method to widely used applications, we implemented our method inside WebView. We also evaluated the proposed method with some popular applications and confirmed that the method can block designated web content without impeding the functionality of applications.
AB - WebView is commonly used by applications on the Android OS. Given that WebView is used as a browsing component on applications, they can be attacked via the web. Existing security mechanisms mainly focus on web browsers; hence, securing WebView is an important challenge. We proposed and implemented a method for preventing suspicious web access in Android WebView. Attackers distribute their malicious content including malicious applications, potentially unwanted programs, and coin miners, by inserting contents into a web page. Because loading malicious content involves HTTP communication, our proposed method monitors HTTP communication by WebView and blocks suspicious web accesses. To apply the proposed method to widely used applications, we implemented our method inside WebView. We also evaluated the proposed method with some popular applications and confirmed that the method can block designated web content without impeding the functionality of applications.
KW - Android
KW - Content blocking
KW - HTTP communication
KW - Web access
KW - WebView
UR - http://www.scopus.com/inward/record.url?scp=85071501635&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85071501635&partnerID=8YFLogxK
U2 - 10.1007/978-3-030-26834-3_14
DO - 10.1007/978-3-030-26834-3_14
M3 - Conference contribution
SN - 9783030268336
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 241
EP - 250
BT - Advances in Information and Computer Security - 14th International Workshop on Security, IWSEC 2019, Proceedings
A2 - Attrapadung, Nuttapong
A2 - Yagi, Takeshi
PB - Springer Verlag
ER -