{"id":76851,"date":"2020-04-05T07:42:20","date_gmt":"2020-04-05T05:42:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android"},"modified":"2020-04-05T07:42:20","modified_gmt":"2020-04-05T05:42:20","slug":"rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","title":{"rendered":"Rezultatele analizei backdoor-urilor \u00een aplica\u021biile pentru Android","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Cercet\u0103torii de la Centrul Helmholtz pentru Securitate Informa\u021bional\u0103 (CISPA), Universitatea de Stat din Ohio \u0219i Universitatea din New York au efectuat<\/a><\/noindex> studiul func\u021bionalit\u0103\u021bii ascunse \u00een aplica\u021biile pentru platforma Android. Analiza a 100 de mii de aplica\u021bii mobile din catalogul Google Play, 20 de mii din catalogul alternativ (Baidu) \u0219i 30 de mii de aplica\u021bii preinstalate pe diverse smartphone-uri, selectate din 1000 de firmware-uri de la SamMobile, a ar\u0103tat<\/a><\/noindex>, a constatat c\u0103 12706 (8.5%) dintre programe con\u021bin func\u021bionalit\u0103\u021bi ascunse de utilizator, dar activabile prin secven\u021be speciale, care pot fi considerate backdoor-uri. <\/p>\n

\u00cen special, 7584 de aplica\u021bii con\u021bineau chei secrete de acces integrate, 501 - parole principale integrate \u0219i 6013 - comenzi ascunse. Aplica\u021biile problematice se \u00eent\u00e2lnesc \u00een toate sursele de programe analizate - din punct de vedere procentual, backdoor-urile au fost identificate \u00een 6.86% (6860) din programele studiate din Google Play, 5.32% (1064) din catalogul alternativ \u0219i 15.96% (4788) din lista aplica\u021biilor preinstalate. Backdoor-urile identificate permit oricui cunoa\u0219te cheile, parolele de activare \u0219i secven\u021bele pentru a apela comenzi, s\u0103 acceseze aplica\u021bia \u0219i toate datele asociate acesteia. <\/p>\n

De exemplu, \u00een aplica\u021bia pentru streaming de meciuri sportive, care are 5 milioane de instal\u0103ri, a fost descoperit\u0103 o cheie integrat\u0103 pentru accesarea interfe\u021bei de administrator, care permite modificarea set\u0103rilor aplica\u021biei \u0219i ob\u021binerea de func\u021bionalit\u0103\u021bi suplimentare. \u00cen aplica\u021bia de blocare a ecranului, cu 5 milioane de instal\u0103ri, a fost g\u0103sit\u0103 o cheie de acces care permite resetarea parolei setate de utilizator pentru blocarea dispozitivului. \u00centr-o aplica\u021bie de traducere, cu 1 milion de instal\u0103ri, se g\u0103se\u0219te o cheie care permite efectuarea de achizi\u021bii \u00een cadrul aplica\u021biei \u0219i actualizarea programului la versiunea pro f\u0103r\u0103 efectiv a pl\u0103ti.<\/p>\n

\u00cen aplica\u021bia de gestionare la distan\u021b\u0103 a dispozitivelor pierdute, care are 10 milioane de instal\u0103ri, a fost descoperit un master password care permite deblocarea impus\u0103 de utilizator \u00een caz de pierdere a dispozitivului. \u00cen aplica\u021bia pentru noti\u021be, a fost g\u0103sit un master password care dezv\u0103luie notele secrete. De asemenea, \u00een multe aplica\u021bii au fost identificate moduri de depanare care deschid accesul la func\u021bii de baz\u0103, de exemplu, \u00een aplica\u021bia de cump\u0103r\u0103turi, introducerea unei combina\u021bii specifice activa un server proxy, iar \u00een programul educativ era posibil\u0103 ocolirea testelor.<\/p>\n

Pe l\u00e2ng\u0103 backdoor-uri, \u00een 4028 (2.7%) dintre aplica\u021bii au fost identificate liste negre folosite pentru cenzurarea informa\u021biilor primite de la utilizatori. Listele negre con\u021bin seturi de cuvinte interzise, inclusiv nume de partide politice \u0219i politicieni, expresii standard folosite pentru intimidare \u0219i discriminarea anumitor categorii sociale. Listele negre au fost identificate \u00een 1.98% dintre aplica\u021biile studiate din Google Play, \u00een 4.46% din catalogul alternativ \u0219i \u00een 3.87% din lista aplica\u021biilor preinstalate.<\/p>\n

Pentru analiza efectuat\u0103 s-a folosit instrumentul creat de cercet\u0103tori, InputScope, ale c\u0103rui coduri vor fi publicat<\/a><\/noindex> disponibile pe GitHub (cercet\u0103torii au publicat anterior analizatorul static LeakScope<\/a><\/noindex>, care identific\u0103 automat scurgerile de informa\u021bii \u00een aplica\u021bii).<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0426\u0435\u043d\u0442\u0440\u0430 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISPA), \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0448\u0442\u0430\u0442\u0430 \u041e\u0433\u0430\u0439\u043e \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android. \u0410\u043d\u0430\u043b\u0438\u0437 100 \u0442\u044b\u0441\u044f\u0447 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 Google Play, 20 \u0442\u044b\u0441\u044f\u0447 \u0438\u0437 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 (Baidu) \u0438 30 \u0442\u044b\u0441\u044f\u0447 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0438\u0437 1000 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0441 SamMobile, \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e 12706 (8.5%) […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-76851","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rezultatele analizei backdoor-urilor \u00een aplica\u021biile pentru Android | ProHoster","description":"Cercet\u0103torii de la Centrul Helmholtz pentru Securitate Informa\u021bional\u0103 (CISPA), Universitatea de Stat din Ohio \u0219i Universitatea din New York","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f Android | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0426\u0435\u043d\u0442\u0440\u0430 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISPA), \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0448\u0442\u0430\u0442\u0430 \u041e\u0433\u0430\u0439\u043e \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-05T05:42:20+00:00","article:modified_time":"2020-04-05T05:42:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"76851","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:28:29","updated":"2022-10-07 21:01:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/76851","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=76851"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/76851\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=76851"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=76851"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=76851"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}