Web access monitoring mechanism for Android WebView

Yuta Imamura, Hiroyuki Uekawa, Yasuhiro Ishihara, Masaya Sato, Toshihiro Yamauchi

Research output: Chapter in Book/Report/Conference proceedingConference contribution

1 Citation (Scopus)

Abstract

In addition to conventional web browsers, WebView is used to display web content on Android. WebView is a component that enables the display of web content in mobile applications, and is extensively used. As WebView displays web content without having to redirect the user to web browsers, there is the possibility that unauthorized web access may be performed secretly via Web-View, and information in Android may be stolen or tampered with. Therefore, it is necessary to monitor and analyze web access via WebView, particularly because attacks exploiting WebView have been reported. However, there is no mechanism for monitoring web access viaWebView. In this work, the goals are to monitor web access via WebView and to analyze mobile applications using Web-View. To achieve these goals, we propose a web access monitoring mechanism for Android WebView. In this paper, the design and implementation of a mechanism that does not require any modifications to the Android Framework and Linux kernel are presented for the Chromium Android System WebView app. In addition, this paper presents evaluation results for the proposed mechanism.

Original languageEnglish
Title of host publicationProceedings of the Australasian Computer Science Week Multiconference, ACSW 2018
PublisherAssociation for Computing Machinery
ISBN (Electronic)9781450354363
DOIs
Publication statusPublished - Jan 29 2018
Event2018 Australasian Computer Science Week Multiconference, ACSW 2018 - Brisbane, Australia
Duration: Jan 29 2018Feb 2 2018

Other

Other2018 Australasian Computer Science Week Multiconference, ACSW 2018
CountryAustralia
CityBrisbane
Period1/29/182/2/18

Fingerprint

Web browsers
World Wide Web
Monitoring
Application programs
Chromium
Display devices
Android (operating system)
Linux

Keywords

  • Android
  • Web access monitoring
  • WebView

ASJC Scopus subject areas

  • Human-Computer Interaction
  • Computer Networks and Communications
  • Computer Vision and Pattern Recognition
  • Software

Cite this

Imamura, Y., Uekawa, H., Ishihara, Y., Sato, M., & Yamauchi, T. (2018). Web access monitoring mechanism for Android WebView. In Proceedings of the Australasian Computer Science Week Multiconference, ACSW 2018 [3167942] Association for Computing Machinery. https://doi.org/10.1145/3167918.3167942

Web access monitoring mechanism for Android WebView. / Imamura, Yuta; Uekawa, Hiroyuki; Ishihara, Yasuhiro; Sato, Masaya; Yamauchi, Toshihiro.

Proceedings of the Australasian Computer Science Week Multiconference, ACSW 2018. Association for Computing Machinery, 2018. 3167942.

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Imamura, Y, Uekawa, H, Ishihara, Y, Sato, M & Yamauchi, T 2018, Web access monitoring mechanism for Android WebView. in Proceedings of the Australasian Computer Science Week Multiconference, ACSW 2018., 3167942, Association for Computing Machinery, 2018 Australasian Computer Science Week Multiconference, ACSW 2018, Brisbane, Australia, 1/29/18. https://doi.org/10.1145/3167918.3167942
Imamura Y, Uekawa H, Ishihara Y, Sato M, Yamauchi T. Web access monitoring mechanism for Android WebView. In Proceedings of the Australasian Computer Science Week Multiconference, ACSW 2018. Association for Computing Machinery. 2018. 3167942 https://doi.org/10.1145/3167918.3167942
Imamura, Yuta ; Uekawa, Hiroyuki ; Ishihara, Yasuhiro ; Sato, Masaya ; Yamauchi, Toshihiro. / Web access monitoring mechanism for Android WebView. Proceedings of the Australasian Computer Science Week Multiconference, ACSW 2018. Association for Computing Machinery, 2018.
@inproceedings{44f2551a9d0a4b56affca3813e5fabbd,
title = "Web access monitoring mechanism for Android WebView",
abstract = "In addition to conventional web browsers, WebView is used to display web content on Android. WebView is a component that enables the display of web content in mobile applications, and is extensively used. As WebView displays web content without having to redirect the user to web browsers, there is the possibility that unauthorized web access may be performed secretly via Web-View, and information in Android may be stolen or tampered with. Therefore, it is necessary to monitor and analyze web access via WebView, particularly because attacks exploiting WebView have been reported. However, there is no mechanism for monitoring web access viaWebView. In this work, the goals are to monitor web access via WebView and to analyze mobile applications using Web-View. To achieve these goals, we propose a web access monitoring mechanism for Android WebView. In this paper, the design and implementation of a mechanism that does not require any modifications to the Android Framework and Linux kernel are presented for the Chromium Android System WebView app. In addition, this paper presents evaluation results for the proposed mechanism.",
keywords = "Android, Web access monitoring, WebView",
author = "Yuta Imamura and Hiroyuki Uekawa and Yasuhiro Ishihara and Masaya Sato and Toshihiro Yamauchi",
year = "2018",
month = "1",
day = "29",
doi = "10.1145/3167918.3167942",
language = "English",
booktitle = "Proceedings of the Australasian Computer Science Week Multiconference, ACSW 2018",
publisher = "Association for Computing Machinery",

}

TY - GEN

T1 - Web access monitoring mechanism for Android WebView

AU - Imamura, Yuta

AU - Uekawa, Hiroyuki

AU - Ishihara, Yasuhiro

AU - Sato, Masaya

AU - Yamauchi, Toshihiro

PY - 2018/1/29

Y1 - 2018/1/29

N2 - In addition to conventional web browsers, WebView is used to display web content on Android. WebView is a component that enables the display of web content in mobile applications, and is extensively used. As WebView displays web content without having to redirect the user to web browsers, there is the possibility that unauthorized web access may be performed secretly via Web-View, and information in Android may be stolen or tampered with. Therefore, it is necessary to monitor and analyze web access via WebView, particularly because attacks exploiting WebView have been reported. However, there is no mechanism for monitoring web access viaWebView. In this work, the goals are to monitor web access via WebView and to analyze mobile applications using Web-View. To achieve these goals, we propose a web access monitoring mechanism for Android WebView. In this paper, the design and implementation of a mechanism that does not require any modifications to the Android Framework and Linux kernel are presented for the Chromium Android System WebView app. In addition, this paper presents evaluation results for the proposed mechanism.

AB - In addition to conventional web browsers, WebView is used to display web content on Android. WebView is a component that enables the display of web content in mobile applications, and is extensively used. As WebView displays web content without having to redirect the user to web browsers, there is the possibility that unauthorized web access may be performed secretly via Web-View, and information in Android may be stolen or tampered with. Therefore, it is necessary to monitor and analyze web access via WebView, particularly because attacks exploiting WebView have been reported. However, there is no mechanism for monitoring web access viaWebView. In this work, the goals are to monitor web access via WebView and to analyze mobile applications using Web-View. To achieve these goals, we propose a web access monitoring mechanism for Android WebView. In this paper, the design and implementation of a mechanism that does not require any modifications to the Android Framework and Linux kernel are presented for the Chromium Android System WebView app. In addition, this paper presents evaluation results for the proposed mechanism.

KW - Android

KW - Web access monitoring

KW - WebView

UR - http://www.scopus.com/inward/record.url?scp=85044741409&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85044741409&partnerID=8YFLogxK

U2 - 10.1145/3167918.3167942

DO - 10.1145/3167918.3167942

M3 - Conference contribution

BT - Proceedings of the Australasian Computer Science Week Multiconference, ACSW 2018

PB - Association for Computing Machinery

ER -