Android Security, or This Is Not the Kind of 'Open' I Meant
Explore Android security vulnerabilities, reverse engineering techniques, and potential solutions with insights from Trustwave SpiderLabs expert Mike Park.
Year in Review - Android Kernel Security
Comprehensive overview of Android kernel security, analyzing vulnerabilities, discussing mitigations, and exploring future improvements for enhanced platform protection.
Call Me Back! Attacks on System Server and System Apps in Android through Synchronous Callback
Explore Android security vulnerabilities through synchronous callbacks, examining attacks on system servers and apps, and discussing detection methods and defense strategies.
The Misuse of Android Unix Domain Sockets and Security Implications
Explore Android Unix domain socket vulnerabilities, their security implications, and mitigation strategies in this comprehensive analysis of potential misuse and authentication weaknesses.
Inside Android's SafetyNet Attestation
Explore Android's SafetyNet Attestation, its role in ecosystem security, and potential vulnerabilities. Learn about attack patterns, device integrity detection, and implementation challenges.
Stealthily Access Your Android Phones - Bypass the Bluetooth Authentication
Explore Android Bluetooth vulnerabilities, including BlueRepli, and learn stealthy access techniques. Discover security risks in AOSP and mobile manufacturers' oversights.
TiYunZong Exploit Chain to Remotely Root Modern Android Devices - Pwn Android Phones from 2015-2020
Comprehensive exploit chain analysis for remotely rooting modern Android devices, focusing on Pixel phones. Explores attack surfaces, introduces new vulnerabilities, and demonstrates practical exploitation techniques.
Extract Data from Damaged Android Mobile Device - Version 7.X.X
Comprehensive workshop on extracting data from damaged Android devices, covering soldering, retrieval of device information, and extraction of various data types for forensic analysis.
Cyberespionage - Targeted Attacks Abusing Third-Party Cloud Services
Explore how APT groups exploit cloud services for cyberespionage, examining real-world cases, attack strategies, and implications for defenders and researchers across Windows and Android platforms.
A Universal Way to Exploit Android PendingIntents in High-profile and System Apps
Explore Android PendingIntent vulnerabilities in high-profile apps, learn exploitation techniques, and discover security implications through case studies and practical demonstrations.
Unprotected Broadcasts in Android 9 and 10
Uncover a critical Android vulnerability allowing unauthorized apps to send protected broadcast messages, impacting system security and user privacy across versions 9, 10, and 11 Developer Preview.
Zen - A Complex Campaign of Harmful Android Apps
Explore Android malware techniques, from repackaging apps to sophisticated rooting trojans. Learn about click fraud, exploit bundling, and persistence mechanisms used by malicious actors.
Generic and Static Detection of Mobile Malware Using ML
Explore machine learning techniques for generic, static detection of mobile malware, focusing on Android but applicable to iOS. Learn about the research methodology, workflow, and results.
200+ Vulnerabilities in Android Phones
Revealing 200+ vulnerabilities in Samsung Android phones, focusing on authentication bypass and system crashes. Demonstrates fragmentation issues and compares with Google's AOSP, offering insights into Android security.
Adaptive Android Kernel Live Patching
Adaptive Android kernel live patching framework for securing devices against vulnerabilities, enabling hotpatching without source code access and automatic adjustment to different models and versions.
Binder - The Bridge To Root - Hongli Han and Mingjian Zhou
Exploración detallada de la vulnerabilidad "Waterdrop" en el controlador Binder de Android, que permite escalar privilegios y obtener acceso root en dispositivos populares, incluyendo los Pixel más recientes.
A New Fuzzing Method for Android
Innovative Android fuzzing method combining function points to find vulnerabilities. Proven effective with 50+ bugs discovered on major OEM devices, inspiring new approaches in mobile security research.
Hiding in Plain Sight - PhantomLance Comes into Play
Uncover the sophisticated PhantomLance Android spyware, its evolution, deployment tactics, and connections to other malware campaigns in this cybersecurity investigation presentation.
Hardening Android Against Ransomware, One Dessert at a Time
Explore Android's evolving defenses against ransomware, from KitKat to Nougat, and learn about system improvements and proactive measures to protect devices, data, and user experience.
A Universal Way to Exploit Android PendingIntents in High-profile and System Apps
Explore Android PendingIntent vulnerabilities in high-profile apps, learn exploitation techniques, and discover security implications for developers and system integrity.
Stealth Mango and the Prevalence of Mobile Surveillanceware
Unveiling nation-state mobile surveillance tools Stealth Mango and Tangelo, exploring their capabilities and impact on government and military targets across multiple countries.