TWC: Small: Collaborative: Characterizing the Security Limitations of Accessing the Mobile Web

TWC：小型：协作：描述访问移动网络的安全限制

• 批准号: 1222699
• 负责人: Patrick Traynor
• 金额: $ 16.7万
• 依托单位: Georgia Tech Research Corporation
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2012
• 资助国家: 美国
• 起止时间: 2012-10-01 至 2015-03-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1222699&HistoricalAwards=false
• 关键词: TWC; Small; Collaborative; Characterizing; Security

Mobile browsers are beginning to serve as critical enablers of modern computing. With a combination of rich features that rival their desktop counterparts and strong security mechanisms such as TLS/SSL, these mobile browsers are becoming the basis of many other mobile apps. Unfortunately, the security guarantees provided by mobile browsers and the risks associated with today?s mobile web have not been evaluated in great detail. This project investigates the security of mobile browsers, the applications that build on them through APIs such as WebViews and the mobile specific websites they access. This research differs significantly from prior work; whereas previous research has focused largely on stand-alone, third-party applications, our work focuses on mobile browsers and the increasing number of applications using them as their basis for delivering content. Moreover, our work measures the extent to which the mobile web itself is vulnerable. The combination of these efforts aims to create the first longitudinal and principled study of the mobile web ecosystem.

移动浏览器正开始成为现代计算的关键推动者。凭借与桌面浏览器相媲美的丰富功能和强大的安全机制(如TLS/SSL)，这些移动浏览器正在成为许多其他移动应用程序的基础。不幸的是，移动浏览器提供的安全保证以及与今天的S移动网络相关的风险还没有得到非常详细的评估。该项目调查移动浏览器的安全性、通过Webview等API构建的应用程序以及它们访问的特定于移动设备的网站。这项研究与以前的工作有很大的不同；以前的研究主要集中在独立的第三方应用程序上，而我们的工作重点是移动浏览器以及越来越多的应用程序使用它们作为提供内容的基础。此外，我们的工作还衡量了移动网络本身的脆弱程度。这些努力的结合旨在创建第一个关于移动网络生态系统的纵向和原则性研究。