{"id":76851,"date":"2020-04-05T07:42:20","date_gmt":"2020-04-05T05:42:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android"},"modified":"2020-04-05T07:42:20","modified_gmt":"2020-04-05T05:42:20","slug":"rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","title":{"rendered":"Androidi rakendustes leitud tagaukse anal\u00fc\u00fcsi tulemused","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Helmholtzi Informatsioonitehnoloogia Keskkonna (CISPA), Ohio osariigi \u00fclikooli ja New Yorgi \u00fclikooli teadlased l\u00e4bi<\/a><\/noindex> uurimise eesm\u00e4rgiks on varjatud funktsionaalsuse anal\u00fc\u00fcs Androidi platvormi rakendustes. Uuriti 100 000 mobiilirakendust Google Play kataloogist, 20 000 alternatiivkast (Baidu) ning 30 000 erinevatel nutitelefonidel eelinstallitud rakendust, mis oli v\u00e4lja valitud 1000 SamMobile'i tarkvaraversioonist. n\u00e4idanud<\/a><\/noindex>, et 12706 (8,5%) rakendust sisaldavad kasutajale varjatud, kuid spetsiaalsete j\u00e4rjestuste abil aktiveeritavat funktsionaalsust, mida v\u00f5ib klassifitseerida tahvelarvutitele. <\/p>\n

Kokkuv\u00f5ttes avastati 7584 rakenduses sisse ehitatud salajased juurdep\u00e4\u00e4suv\u00f5tmed, 501 — sisse ehitatud meistrisalasanad ja 6013 — varjatud k\u00e4sud. Probleemseid rakendusi leidub k\u00f5ikides uuritud rakenduste allikates — protsentides olid tagaukse avastatud 6.86% (6860) Google Play's uuritud rakendustest, 5.32% (1064) alternatiivsetest kataloogidest ja 15.96% (4788) eelinstallitud rakenduste nimekirjast. Avatud tagauksed v\u00f5imaldavad k\u00f5igil, kes teavad v\u00f5tmeid, aktiveerimise paroole ja k\u00e4skude kutsumise j\u00e4rjestust, p\u00e4\u00e4seda rakendusele ja k\u00f5igile sellega seotud andmetele. <\/p>\n

N\u00e4iteks spordim\u00e4ngude voogedastusrakenduses, millel on 5 miljonit allalaadimist, leiti sisseehitatud v\u00f5ti, mis annab juurdep\u00e4\u00e4su administraatori liidesele, v\u00f5imaldades muuta rakenduse seadeid ja p\u00e4\u00e4seda juurde lisafunktsioonidele. Ekraaniaeglustusrakenduses, millel on samuti 5 miljonit allalaadimist, avastati juurdep\u00e4\u00e4suv\u00f5ti, mis v\u00f5imaldab kasutajal l\u00e4htestada seadme lukustamiseks seatud parooli. T\u00f5lkerakenduses, millel on 1 miljon allalaadimist, on olemas v\u00f5ti, mis v\u00f5imaldab teostada rakendusesoste ja uuendada programmi pro-versiooniks ilma tegelikku tasumist l\u00e4biviimata.<\/p>\n

Kaugjuhtimise rakenduses, millel on 10 miljonit installi, tuvastati meistrikood, mis v\u00f5imaldab eemaldada kasutaja seadmest seadistatud lukustuse kadumise korral. M\u00e4rkmete tegemise rakenduses leiti meistrikood, mis v\u00f5imaldab avada salajased m\u00e4rkmed. Paljudes rakendustes leiti ka silumise re\u017eiimid, mis avavad juurdep\u00e4\u00e4su madala taseme funktsioonidele; n\u00e4iteks ostlemise rakenduses k\u00e4ivitati teatud kombinatsiooni sisestamisel vahemeetod, ja \u00f5ppimisprogrammis oli v\u00f5imalik eksamite l\u00e4bimist v\u00e4ltida.<\/p>\n

Lisaks tagavarav\u00f5tetele on 4028 (2,7%) rakendusest tuvastatud mustade nimekirjade olemasolu, mida kasutatakse kasutajalt saadud teabe tsenseerimiseks. Kasutatavad mustad nimekirjad sisaldavad komplekte keelatud s\u00f5nu, sealhulgas poliitiliste parteide ja poliitikute nimesid, t\u00fc\u00fcpilisi fraase, mida kasutatakse hirmutamiseks ja teatud elanikkonna kiusamiseks. Mustad nimekirjad tuvastati 1,98% uuritud rakendustest Google Play's, 4,46% alternatiivses kataloogis ja 3,87% eelinstallitud rakenduste loendis.<\/p>\n

Anal\u00fc\u00fcsi l\u00e4biviimiseks kasutati teadlaste loodud t\u00f6\u00f6riista InputScope, mille kood peaks peagi olema avaldatud<\/a><\/noindex> GitHub'is (varem on teadlased juba avaldanud staatilise anal\u00fcsaatori LeakScope<\/a><\/noindex>, mis automaatselt tuvastab rakendustes andmelekkeid).<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0426\u0435\u043d\u0442\u0440\u0430 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISPA), \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0448\u0442\u0430\u0442\u0430 \u041e\u0433\u0430\u0439\u043e \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android. \u0410\u043d\u0430\u043b\u0438\u0437 100 \u0442\u044b\u0441\u044f\u0447 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 Google Play, 20 \u0442\u044b\u0441\u044f\u0447 \u0438\u0437 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 (Baidu) \u0438 30 \u0442\u044b\u0441\u044f\u0447 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0438\u0437 1000 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0441 SamMobile, \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e 12706 (8.5%) […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-76851","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Androidi rakenduste tagakaubanduse anal\u00fc\u00fcsi tulemused | ProHoster","description":"Helmholtzi Informatsioonitehnoloogia Keskkonna (CISPA), Ohio osariigi \u00fclikooli ja New Yorgi \u00fclikooli teadlased","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f Android | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0426\u0435\u043d\u0442\u0440\u0430 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISPA), \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0448\u0442\u0430\u0442\u0430 \u041e\u0433\u0430\u0439\u043e \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-05T05:42:20+00:00","article:modified_time":"2020-04-05T05:42:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"76851","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:28:29","updated":"2022-10-07 21:01:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/76851","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=76851"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/76851\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=76851"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=76851"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=76851"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}