TWC: Small: Collaborative: Characterizing the Security Limitations of Accessing the Mobile Web

移动浏览器开始成为现代计算的关键推动者。这些移动浏览器结合了与桌面浏览器相媲美的丰富功能和强大的安全机制（如TLS/SSL），正在成为许多其他移动应用程序的基础。不幸的是，移动浏览器提供的安全保证与今天的风险相关吗？美国的移动网络还没有得到详细的评估。该项目调查了移动浏览器的安全性、通过WebViews等api构建在移动浏览器上的应用程序以及它们访问的移动特定网站。这项研究与之前的工作有很大不同；虽然之前的研究主要集中在独立的第三方应用程序上，但我们的工作主要集中在移动浏览器和越来越多的应用程序上，这些应用程序将它们作为交付内容的基础。此外，我们的工作衡量了移动网络本身的脆弱程度。这些努力的结合旨在创建移动网络生态系统的第一个纵向和原则性研究。

Mobile browsers are beginning to serve as critical enablers of modern computing. With a combination of rich features that rival their desktop counterparts and strong security mechanisms such as TLS/SSL, these mobile browsers are becoming the basis of many other mobile apps. Unfortunately, the security guarantees provided by mobile browsers and the risks associated with today?s mobile web have not been evaluated in great detail. This project investigates the security of mobile browsers, the applications that build on them through APIs such as WebViews and the mobile specific websites they access. This research differs significantly from prior work; whereas previous research has focused largely on stand-alone, third-party applications, our work focuses on mobile browsers and the increasing number of applications using them as their basis for delivering content. Moreover, our work measures the extent to which the mobile web itself is vulnerable. The combination of these efforts aims to create the first longitudinal and principled study of the mobile web ecosystem.