Remote code execution on Android

Mgr. Mayank Samadhiya

Master's thesis

Abstract:

Android is an open-source platform which is widely used in smart phones, tablets and other low power applications. The security of Android has become very crucial with high increase in usage. The number of attacks on Android and their sophistication has increased exponentially in past few years. This work explores the security mechanism deployed by Android developers to protect their users along with few of the vulnerabilities reported recently. Further five well known vulnerabilities are chosen and are executed on vulnerable versions and patched versions on emulators and different hardware platforms.

Keywords

Android, Exploit, Integer Overflow, Integer Underflow, Libstagefright, Patch, Privilege Escalation, Remote Code Execution, Vulnerability, WebView.

Jazyk práce: English

Datum vytvoření / odevzdání či podání práce: 14. 12. 2017

Obhajoba závěrečné práce

• Obhajoba proběhla 2. 2. 2018
• Vedúci: RNDr. Martin Stehlík, Ph.D.
• Oponent: RNDr. Andrij Stecko, Ph.D.

Masaryk University

Faculty of Informatics

Master programme / odbor:
Informatics / Information Technology Security (eng.)