Study: Including ads in mobile apps poses privacy, security risks
2012-03-20
(Press-News.org) Researchers from North Carolina State University have found that including ads in mobile applications (apps) poses privacy and security risks. In a recent study of 100,000 apps in the official Google Play market, researchers noticed that more than half contained so-called ad libraries. And 297 of the apps included aggressive ad libraries that were enabled to download and run code from remote servers – which raises significant privacy and security concerns.
"Running code downloaded from the Internet is problematic because the code could be anything," says Dr. Xuxian Jiang, an assistant professor of computer science at NC State and co-author of a paper describing the work. "For example, it could potentially launch a 'root exploit' attack to take control of your phone – as demonstrated in a recently discovered piece of Android malware called RootSmart."
In Google Play (formerly known as the Android Market) and other markets, many developers offer free apps. To generate revenue, these app developers incorporate "in-app ad libraries," which are provided by Google, Apple or other third-parties. These ad libraries retrieve advertisements from remote servers and run the ads on a user's smartphone periodically. Every time an ad runs, the app developer receives a payment.
This poses potential problems because the ad libraries receive the same permissions that the user granted to the app itself when it was installed – regardless of whether the user was aware he or she was granting permissions to the ad library.
Jiang's team looked at a sample of 100,000 apps available on Google Play between March and May 2011 and examined the 100 representative ad libraries used by those apps. One significant find was that 297 of the apps (1 out of every 337 apps) used ad libraries "that made use of an unsafe mechanism to fetch and run code from the Internet – a behavior that is not necessary for their mission, yet has troubling privacy and security implications," Jiang says. But that is only the most extreme example.
Jiang's team found that 48,139 of the apps (1 in 2.1) had ad libraries that track a user's location via GPS, presumably to allow an ad library to better target ads to the user. However, 4,190 apps (1 in 23.4) used ad libraries that also allowed advertisers themselves to access a user's location via GPS. Other information accessed by some ad libraries included call logs, user phone numbers and lists of all the apps a user has stored on his or her phone.
These ad libraries pose security risks because they offer a way for third parties – including hackers – to bypass existing Android security efforts. Specifically, the app itself may be harmless, so it won't trigger any security concerns. But the app's ad library may download harmful or invasive code after installation.
"To limit exposure to these risks, we need to isolate ad libraries from apps and make sure they don't have the same permissions," Jiang says. "The current model of directly embedding ad libraries in mobile apps does make it convenient for app developers, but also fundamentally introduces privacy and security risks. The best solution would be for Google, Apple and other mobile platform providers to take the lead in providing effective ad-isolation mechanisms."
The paper, "Unsafe Exposure Analysis of Mobile In-App Advertisements," was co-authored by Jiang; NC State Ph.D. students Michael Grace and Wu Zhou; and Dr. Ahmad-Reza Sadeghi of the Technical University Darmstadt. The paper will be presented April 17 at the 5th ACM Conference on Security and Privacy in Wireless and Mobile Networks in Tucson. The research was supported by the National Science Foundation.
INFORMATION: END
ELSE PRESS RELEASES FROM THIS DATE:
2012-03-20
Kloverpoint Technologies Inc. is pleased to announce the release of its newest tool that will allow its network members to quickly post updates and announcements to Twitter regarding new content created and published on Kloverpoint.
Creating and sharing webpages and photo albums are some of the main features of Kloverpoint. The integration of Twitter with Kloverpoint allows for quick announcement postings that will notify Twitter followers that new content is available on Kloverpoint.
"With the release of our newest tool, Kloverpoint users will not need to ...
2012-03-20
Jackson Laboratory researchers have demonstrated that a single, targeted x-ray treatment of an individual eye in young, glaucoma-prone mice provided that eye with apparently life-long and typically complete protection from glaucoma.
In research published March 19 in the Journal of Clinical Investigation, Gareth Howell, Ph.D., Simon John, Ph.D., (professor and Howard Hughes Medical Investigator) and colleagues also used sophisticated genomics methods to uncover some of the very first pathways to change during glaucoma in these mice. The first pathway they detected to change ...
2012-03-20
EAST LANSING, Mich. — Having a triple-threat combination of protective software on your computer greatly reduces your chances of identity theft, according to a study led by a Michigan State University criminologist.
In a survey of more than 600 people, the researchers found that computer users who were running antivirus, anti-adware and anti-spyware software were 50 percent less likely to have their credit card information stolen.
The study appears in the research journal Deviant Behavior.
"When you think about antivirus software protecting you, you might think about ...
2012-03-20
Monday, March 19, 2012 marked billWheels.com's entrance into the fierce and competitive world of marketing firms. The company's founder, Scott Anderson, states that he plans to help SUV owners with gas purchases, loan payments, or other costs involved to use their own vehicles by helping them leverage very simple, very effective advertising space that already sits on the back of their vehicles -- their spare wheel tire covers.
"There is nothing more powerful than an idea that's overdue to be in existence," says Scott. Driving home from his 7-4 job, the idea ...
2012-03-20
"Mud samples boiled in acid sounds like witchcraft," admits microbiologist Bente Lomstein from the Department of Bioscience when explaining how she and an international group of researchers achieved the outstanding results being published today in the journal Nature.
Bacteria are the only living organisms to produce D-amino acids that deposit a chemical signature in the mud in which they live. Researchers at the Department of Bioscience and the Danish National Research Foundation's Center for Geomicrobiology at Aarhus University have used this knowledge together with American ...
2012-03-20
Washington, March 19, 2012 – Infection preventionists and healthcare epidemiologists play key roles in promoting effective antimicrobial stewardship in collaboration with other health professionals, according to a joint position paper published today by the Association for Professionals in Infection Control and Epidemiology (APIC) and the Society for Healthcare Epidemiology of America (SHEA) in their respective peer-review journals, the American Journal of Infection Control and Infection Control and Hospital Epidemiology.
Antimicrobial agents, which include antibiotics ...
2012-03-20
DURHAM, N.H. – A new book by a University of New Hampshire researcher and Vietnam-era disabled veteran sheds new light on the long-term psychological trauma experienced by the coalition force in recent wars in the Gulf and Balkans that, when left untreated, can have deadly consequences.
In his new book "War Trauma and its Aftermath: An International Perspective on the Balkan and Gulf Wars" (University Press of America, 2012), Laurence French, senior research associate at UNH Justiceworks, and co-author Lidija Nikolic-Novakovic, a Balkan War survivor, detail how the Gulf ...
2012-03-20
DETROIT – Styling practices can lead to serious hair and scalp diseases for some African Americans, says Henry Ford Hospital dermatologist Diane Jackson-Richards, M.D.
"Hair is an extremely important aspect of an African-American woman's appearance," says
Dr. Jackson-Richards, director of Henry Ford's Multicultural Dermatology Clinic. "Yet, many women who have a hair or scalp disease do not feel their physician takes them seriously. Physicians should become more familiar with the culturally accepted treatments for these diseases."
Dr. Jackson-Richards says proper hair ...
2012-03-20
When hands start hurting, it's common to wonder whether it�EUR s time to seek out a hand doctor or hand specialist. But how can one tell the difference between a normal, everyday, hand problem and one that may require the attention of a hand doctor and specialist?
Well, there are some signs that every hand specialist will look for.
Symptoms that include persistent pain, numbness, weakness, stiffness, or mobility problems are sure signs that something may be wrong. Some of these symptoms result from an instant injury, like a break or sprain. Others seem to come on ...
2012-03-20
For a 6-year-old, one of the most powerful educational tools may be direct instruction, according to new research on how children learn about prejudice. Scientists found that as children get closer to age 10, they begin to rely more on their own experiences rather than what people tell them – but for youngsters, instruction trumps experience.
"Young children are information hungry – they are eagerly searching for general rules to help in mapping out their social worlds," write Sonia Kang and Michael Inzlicht of the University of Toronto in this month's Personality and ...
LAST 30 PRESS RELEASES:
[Press-News.org] Study: Including ads in mobile apps poses privacy, security risks
