Tapjacking Threats and Mitigation Techniques for Android Applications

摘要: With the increased dependency on web applications through mobile devices, malicious attack techniques have now shifted from traditional running desktop or laptop (allowing mouse click-based interactions) to devices touch-based interactions). Clickjacking is a type of originating in applications, where victims are lured click seemingly benign objects pages. However, when clicked, unintended actions performed without user’s knowledge. In particular, it shown that users touch an object application triggering not actually intended by victims. This new form clickjacking called tapjacking. Much research work has focused developing mitigation level issue. none thoroughly investigated attacks and due tapjacking devices. this thesis, we identify coding practices can be helpful for software practitioners avoid define detection prevent consequence end users. We first find out falls within broader literature malware, particular Android malware. direction, propose classification Then, novel technique based Kullback-Leibler Divergence (KLD) possible behavior applications. validate approach with set android also implemented prototype tool detecting symptom using KLD measurement. The evaluation results show detected effectively KLD. thesis organized following format: survey techniques, discussion our proposed KLD-Based approach, implementation.