{"id":76851,"date":"2020-04-05T07:42:20","date_gmt":"2020-04-05T05:42:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android"},"modified":"2020-04-05T07:42:20","modified_gmt":"2020-04-05T05:42:20","slug":"rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","title":{"rendered":"Rezultatet e analiz\u00ebs s\u00eb backdoor-eve n\u00eb aplikacionet p\u00ebr Android","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>K\u00ebrkuesit e Qendr\u00ebs Helmholtz p\u00ebr Sigurin\u00eb e Informacionit (CISPA), Universitetit t\u00eb Shtetit t\u00eb Ohio dhe Universitetit t\u00eb Nju Jorkut <noindex><a rel=\"nofollow\" href=\"https:\/\/cispa.saarland\/2020\/04\/03\/hidden-functions-make-mobile-phone-apps-vulnerable-to-hackers.html\">realizuan<\/a><\/noindex> hulumtimi i funksionaliteteve t\u00eb fshehta n\u00eb aplikacionet p\u00ebr platform\u00ebn Android. Analiza e 100 mij\u00eb aplikacioneve mobile nga katalogu Google Play, 20 mij\u00eb nga nj\u00eb katalog alternativ (Baidu) dhe 30 mij\u00eb aplikacione t\u00eb parainstaluara n\u00eb smartphone t\u00eb ndrysh\u00ebm, t\u00eb ndara nga 1000 firmware nga SamMobile, <noindex><a rel=\"nofollow\" href=\"https:\/\/panda.moyix.net\/~moyix\/papers\/inputscope_oakland20.pdf\">tregoi<\/a><\/noindex>, t\u00eb cilat tregojn\u00eb se 12706 (8.5%) programe p\u00ebrmbajn\u00eb funksionalitete t\u00eb fshehta nga p\u00ebrdoruesi, por q\u00eb aktivizohen p\u00ebrmes sekuencave speciale, t\u00eb cilat mund t\u00eb klasifikohen si backdoor-e. <\/p>\n<p>Konkretisht, 7584 aplikacione p\u00ebrfshinin \u00e7el\u00ebsa t\u00eb fsheht\u00eb t\u00eb integruar, 501 \u2014 fjal\u00ebkalime t\u00eb integruara dhe 6013 \u2014 komanda t\u00eb fshehta. Aplikacionet problematike shfaqen n\u00eb t\u00eb gjitha burimet e shqyrtuara t\u00eb softuerit \u2014 n\u00eb p\u00ebrqindje, backdoor-t jan\u00eb identifikuar n\u00eb 6.86% (6860) t\u00eb aplikacioneve t\u00eb studiuara nga Google Play, n\u00eb 5.32% (1064) nga katalogu alternativ dhe n\u00eb 15.96% (4788) nga lista e aplikacioneve t\u00eb parainstaluara. Backdoor-t e zbuluara lejojn\u00eb \u00e7do person q\u00eb di \u00e7el\u00ebsat, fjal\u00ebkalimet e aktivizimit dhe sekuencat p\u00ebr thirrjen e komandeve, t\u00eb ket\u00eb qasje n\u00eb aplikacion dhe t\u00eb gjitha t\u00eb dh\u00ebnat e lidhura me t\u00eb. <\/p>\n<p>P\u00ebr shembull, n\u00eb nj\u00eb aplikacion p\u00ebr transmetimin e ndeshjeve sportive, me 5 milion instalime, \u00ebsht\u00eb gjetur nj\u00eb \u00e7el\u00ebs i integruar p\u00ebr qasje n\u00eb nd\u00ebrfaqen e administratorit, duke lejuar ndryshimin e cil\u00ebsimeve t\u00eb aplikacionit dhe qasjen n\u00eb funksionalitete shtes\u00eb. N\u00eb nj\u00eb aplikacion p\u00ebr bllokimin e ekranit, me 5 milion instalime, \u00ebsht\u00eb gjetur nj\u00eb \u00e7el\u00ebs qasjeje q\u00eb lejon rikuperimin e fjal\u00ebkalimit q\u00eb p\u00ebrdoruesi vendos p\u00ebr bllokimin e pajisjes. N\u00eb nj\u00eb program p\u00ebrkthyes, me 1 milion instalime, \u00ebsht\u00eb i pranish\u00ebm nj\u00eb \u00e7el\u00ebs q\u00eb lejon realizimin e blerjeve brenda aplikacionit dhe p\u00ebr t\u00eb p\u00ebrmir\u00ebsuar programin n\u00eb versionin pro pa pages\u00eb efektive.<\/p>\n<p> N\u00eb programin p\u00ebr menaxhimin e pajisjeve t\u00eb humbura n\u00eb distanc\u00eb, i cili ka 10 milion instalime, \u00ebsht\u00eb zbuluar nj\u00eb master-fjal\u00ebkalim q\u00eb mund\u00ebson heqjen e bllokimit t\u00eb vendosur nga p\u00ebrdoruesi n\u00eb rast humbjeje t\u00eb pajisjes. N\u00eb programin p\u00ebr mbajtjen e sh\u00ebnimeve \u00ebsht\u00eb gjetur nj\u00eb master-fjal\u00ebkalim q\u00eb lejon \u00e7eljen e sh\u00ebnimeve sekrete. N\u00eb shum\u00eb aplikacione gjithashtu jan\u00eb zbuluar modet debug q\u00eb hapin qasje n\u00eb ve\u00e7orit\u00eb e nivelit t\u00eb ul\u00ebt, p\u00ebr shembull, n\u00eb aplikacionin p\u00ebr blerje, me dh\u00ebnien e nj\u00eb kombinimi t\u00eb caktuar aktivizohej nj\u00eb server proxy, dhe n\u00eb programin e trajnimit kishte mund\u00ebsi p\u00ebr t\u00eb anashkaluar kalimin e testeve.<\/p>\n<p>P\u00ebrve\u00e7 backdoor-ve, n\u00eb 4028 (2.7%) aplikacioneve jan\u00eb identifikuar m\u00ebnyra t\u00eb zeza, t\u00eb p\u00ebrdorura p\u00ebr censurimin e informacionit q\u00eb vjen nga p\u00ebrdoruesi. M\u00ebnyrat e zeza q\u00eb p\u00ebrdoren p\u00ebrmbajn\u00eb grupe fjal\u00ebsh t\u00eb ndaluara p\u00ebr t'u p\u00ebrmendur, duke p\u00ebrfshir\u00eb emrat e partive politike dhe politician\u00ebve, fraza tipike q\u00eb p\u00ebrdoren p\u00ebr t\u00eb frik\u00ebsuar dhe diskriminuar grupe t\u00eb caktuara t\u00eb popullsis\u00eb. M\u00ebnyrat e zeza jan\u00eb zbuluar n\u00eb 1.98% t\u00eb aplikacioneve t\u00eb studiuara nga Google Play, n\u00eb 4.46% t\u00eb katalogut alternativ dhe n\u00eb 3.87% t\u00eb list\u00ebs s\u00eb aplikacioneve t\u00eb paracaktuara.<\/p>\n<p>P\u00ebr realizimin e analiz\u00ebs \u00ebsht\u00eb p\u00ebrdorur instrumenti i krijuar nga hulumtuesit InputScope, kodi i t\u00eb cilit do t\u00eb publikohet s\u00eb shpejti <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/OSUSecLab\/InputScope\">u publikua<\/a><\/noindex> n\u00eb GitHub (m\u00eb par\u00eb hulumtuesit kan\u00eb publikuar nj\u00eb analizues static <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/OSUSecLab\/LeakScope\">LeakScope<\/a><\/noindex>, i cili identifikon automatikisht rrjedhjet e informacionit n\u00eb aplikacione).<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Burimi: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52677\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0426\u0435\u043d\u0442\u0440\u0430 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISPA), \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0448\u0442\u0430\u0442\u0430 \u041e\u0433\u0430\u0439\u043e \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android. \u0410\u043d\u0430\u043b\u0438\u0437 100 \u0442\u044b\u0441\u044f\u0447 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 Google Play, 20 \u0442\u044b\u0441\u044f\u0447 \u0438\u0437 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 (Baidu) \u0438 30 \u0442\u044b\u0441\u044f\u0447 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0438\u0437 1000 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0441 SamMobile, \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e 12706 (8.5%) [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-76851","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0426\u0435\u043d\u0442\u0440\u0430 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISPA), \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0448\u0442\u0430\u0442\u0430 \u041e\u0433\u0430\u0439\u043e \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f Android | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0426\u0435\u043d\u0442\u0440\u0430 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISPA), \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0448\u0442\u0430\u0442\u0430 \u041e\u0433\u0430\u0439\u043e \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-04-05T05:42:20+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-04-05T05:42:20+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rezultatet e analiz\u00ebs s\u00eb backdoor-\u00ebve n\u00eb aplikacione p\u00ebr Android | ProHoster","description":"K\u00ebrkuesit e Qendr\u00ebs Helmholtz p\u00ebr Sigurin\u00eb e Informacionit (CISPA), Universitetit t\u00eb Shtetit t\u00eb Ohio dhe Universitetit t\u00eb Nju Jorkut","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f Android | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0426\u0435\u043d\u0442\u0440\u0430 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISPA), \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0448\u0442\u0430\u0442\u0430 \u041e\u0433\u0430\u0439\u043e \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-05T05:42:20+00:00","article:modified_time":"2020-04-05T05:42:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"76851","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:28:29","updated":"2022-10-07 21:01:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/76851","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=76851"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/76851\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=76851"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=76851"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=76851"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}