Activity Spoofing and Its Defense in Android Smartphones

摘要: Smartphones have become ubiquitous in today’s digital world as a mobile platform allowing anytime access to email, social platforms, banking, and shopping. Many providers supply native applications method their services, users login directly through downloadable app. In this paper, we first expose security vulnerability the Android framework that allows for third party apps spoof app activities, or screens. This can lead wide variety of risks including capture silent exfiltration credentials private data. We then compare current defense mechanisms, introduce concept Trusted Activity Chains lightweight protection against common spoofing attacks. develop proof implementation evaluate its effectiveness performance overhead.