Shifting to Mobile: Network-Based Empirical Study of Mobile Vulnerability Market

摘要: With the increasing popularity and great economic benefit from vulnerability exploitation, it is important to study mobile in ecosystem. Beyond traditional technical solutions such as developing technologies identify potential vulnerabilities, discover widely available exploitations protect consumers attacks, constructing market, a marketplace for discovery, disclosure has been considered an effective approach. Therefore, understanding mechanism of market further optimizations attracting attentions both academia industry. Since ecosystem playing increasingly role daily life, this paper aims understand evolution data-driven approach, aiming issues research. Specially, five-layer heterogeneous network, consisting software vendors, products, public disclosed hunters, organizations their relations, established formally represent market. Based on data collected variety agencies, including NVD, OSVDB, BID vendor advisories, comprehensive empirical analysis reported, focusing growth well interactions between other PCs platforms. Finally, suggestions drawn observations, security evaluation code reused, leaking protection permission overuse identification, hunter's strategy behavior understanding, information sharing external workforce hiring, cross-platform digging are discussed enhancement.