"An Analysis of the Privacy and Security Risks of Android VPN Permission-enabled Apps"

ichito · Feb 1, 2017

"An Analysis of the Privacy and Security Risks of Android VPN Permission-enabled Apps"

In this paper we provide a first comprehensive analysis
of 283 Android apps that use the Android VPN permission,
which we extracted from a corpus of more than 1.4 million
apps on the Google Play store. We perform a number of
passive and active measurements designed to investigate a
wide range of security and privacy features and to study the
behavior of each VPN-based app. Our analysis includes in-
vestigation of possible malware presence, third-party library
embedding, and traffic manipulation, as well as gauging user
perception of the security and privacy of such apps. Our ex-
periments reveal several instances of VPN apps that expose
users to serious privacy and security vulnerabilities, such as
use of insecure VPN tunneling protocols, as well as IPv6 and
DNS traffic leakage. We also report on a number of apps
actively performing TLS interception. Of particular con-
cern are instances of apps that inject JavaScript programs for
tracking, advertising, and for redirecting e-commerce traffic
to external partners.
Click to expand...

https://research.csiro.au/ng/wp-content/uploads/sites/106/2016/08/paper-1.pdf

stapp · Feb 1, 2017

Already posted here thanks.

https://www.wilderssecurity.com/thr...f-android-vpn-permission-enabled-apps.391567/

Log in or Sign up

"An Analysis of the Privacy and Security Risks of Android VPN Permission-enabled Apps"

ichito Registered Member

stapp Global Moderator

Log in or Sign up

"An Analysis of the Privacy and Security Risks of Android VPN Permission-enabled Apps"

ichito Registered Member

stapp Global Moderator

Useful Searches