{"id":76851,"date":"2020-04-05T07:42:20","date_gmt":"2020-04-05T05:42:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android"},"modified":"2020-04-05T07:42:20","modified_gmt":"2020-04-05T05:42:20","slug":"rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","title":{"rendered":"Rezultatet e analiz\u00ebs s\u00eb backdoor-eve n\u00eb aplikacionet p\u00ebr Android","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

K\u00ebrkuesit e Qendr\u00ebs Helmholtz p\u00ebr Sigurin\u00eb e Informacionit (CISPA), Universitetit t\u00eb Ohio-it dhe Universitetit t\u00eb New York-ut kreun<\/a><\/noindex> k\u00ebrkuan funksionalitetin e fshehur n\u00eb aplikacionet p\u00ebr platform\u00ebn Android. Analizuan 100 mij\u00eb aplikacione mobile nga katalogu Google Play, 20 mij\u00eb nga katalogu alternativ (Baidu) dhe 30 mij\u00eb aplikacione t\u00eb paracaktuar n\u00eb smartphone t\u00eb ndrysh\u00ebm, t\u00eb nxjerr\u00eb nga 1000 firmware nga SamMobile, tregoi<\/a><\/noindex>, se 12706 (8.5%) nga programet p\u00ebrmbanin funksionalitet t\u00eb fshehur nga p\u00ebrdoruesi, por q\u00eb aktivizohej p\u00ebrmes sekuencash t\u00eb ve\u00e7anta, t\u00eb cilat mund t\u00eb klasifikohen si backdoor. <\/p>\n

N\u00eb ve\u00e7anti, 7584 aplikacione p\u00ebrfshinin \u00e7el\u00ebsa t\u00eb integruar t\u00eb fsheht\u00eb, 501 \u2014 fjal\u00ebkalime t\u00eb integruara dhe 6013 \u2014 komanda t\u00eb fshehta. Aplikacionet problematike ndodhin n\u00eb t\u00eb gjitha burimet e shqyrtuara t\u00eb software-it \u2014 n\u00eb p\u00ebrqindje, backdoor-t jan\u00eb zbuluar n\u00eb 6.86% (6860) t\u00eb programeve t\u00eb studiuara nga Google Play, n\u00eb 5.32% (1064) nga katalogu alternativ dhe n\u00eb 15.96% (4788) nga lista e aplikacioneve t\u00eb paracaktuar. Backdoor-t e zbuluara lejojn\u00eb \u00e7do person q\u00eb i njeh \u00e7el\u00ebsat, fjal\u00ebkalimet e aktivizimit dhe sekuencat p\u00ebr thirrjen e komandave t\u00eb ket\u00eb qasje n\u00eb aplikacion dhe n\u00eb t\u00eb gjitha t\u00eb dh\u00ebnat e lidhura me t\u00eb. <\/p>\n

P\u00ebr shembull, n\u00eb nj\u00eb aplikacion p\u00ebr transmetimin e ndeshjeve sportive, i cili ka 5 milion instalime, u gjet nj\u00eb \u00e7el\u00ebs i integruar p\u00ebr t\u00eb hyr\u00eb n\u00eb nd\u00ebrfaqen e administratorit, duke mund\u00ebsuar ndryshimin e konfigurimeve t\u00eb aplikacionit dhe aksesin n\u00eb funksionalitet t\u00eb shtuar. N\u00eb nj\u00eb aplikacion p\u00ebr bllokimin e ekranit, me 5 milion instalime, u gjet nj\u00eb \u00e7el\u00ebs aksesimi, i cili lejon t\u00eb rivendoset fjal\u00ebkalimi i vendosur nga p\u00ebrdoruesi p\u00ebr bllokimin e pajisjes. N\u00eb nj\u00eb program p\u00ebr p\u00ebrkthimin, me 1 milion instalime, ishte i pranish\u00ebm nj\u00eb \u00e7el\u00ebs q\u00eb lejonte blerjet brenda aplikacionit dhe p\u00ebrmir\u00ebsimin e programit n\u00eb versionin pro pa pages\u00eb t\u00eb v\u00ebrtet\u00eb.<\/p>\n

N\u00eb nj\u00eb program p\u00ebr menaxhimin e pajisjeve t\u00eb humbura, q\u00eb ka 10 milion instalime, u zbulua nj\u00eb master password, q\u00eb lejon t\u00eb hiqet bllokimi i vendosur nga p\u00ebrdoruesi n\u00eb rast humbjeje t\u00eb pajisjes. N\u00eb nj\u00eb program p\u00ebr mbajtjen e sh\u00ebnimeve u gjet nj\u00eb master password, i cili lejon t\u00eb hapen sh\u00ebnimet e fshehta. N\u00eb shum\u00eb aplikacione u identifikuan gjithashtu modulet e debugimit, q\u00eb hapin aksesin n\u00eb mund\u00ebsit\u00eb e ulta, p\u00ebr shembull, n\u00eb nj\u00eb aplikacion p\u00ebr blerje, kur futeshin nj\u00eb kombinim i caktuar, aktivizohej nj\u00eb server proxy, dhe n\u00eb nj\u00eb program edukativ ekzistonte mund\u00ebsia e kap\u00ebrcimit t\u00eb testeve.<\/p>\n

P\u00ebrve\u00e7 backdoor-ve, n\u00eb 4028 (2.7%) aplikacione u identifikua prania e listave t\u00eb zeza, q\u00eb p\u00ebrdoren p\u00ebr censurimin e informacionit t\u00eb ardhur nga p\u00ebrdoruesi. Listat e zeza p\u00ebrmbajn\u00eb grupe fjal\u00ebsh t\u00eb ndaluara p\u00ebr p\u00ebrmendje, p\u00ebrfshir\u00eb emra partish politike dhe politikan\u00ebsh, fraza tipike q\u00eb p\u00ebrdoren p\u00ebr frik\u00ebsimin dhe diskriminimin e grupeve t\u00eb caktuara t\u00eb popullsis\u00eb. Listat e zeza u gjet\u00ebn n\u00eb 1.98% t\u00eb aplikacioneve t\u00eb shqyrtuara nga Google Play, n\u00eb 4.46% nga katalogu alternativ dhe n\u00eb 3.87% nga lista e aplikacioneve t\u00eb paracaktuar.<\/p>\n

P\u00ebr t\u00eb kryer analiz\u00ebn u p\u00ebrdor nj\u00eb instrument i krijuar nga k\u00ebrkuesit, InputScope, kodi i t\u00eb cilit do t\u00eb publikohet s\u00eb shpejti \u00ebsht\u00eb publikuar<\/a><\/noindex> n\u00eb GitHub (m\u00eb par\u00eb, k\u00ebrkuesit kishin publikuar nj\u00eb analizues statik LeakScope<\/a><\/noindex>, i cili identifikon automatikisht rrjedhjet e informacionit n\u00eb aplikacione).<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0426\u0435\u043d\u0442\u0440\u0430 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISPA), \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0448\u0442\u0430\u0442\u0430 \u041e\u0433\u0430\u0439\u043e \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android. \u0410\u043d\u0430\u043b\u0438\u0437 100 \u0442\u044b\u0441\u044f\u0447 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 Google Play, 20 \u0442\u044b\u0441\u044f\u0447 \u0438\u0437 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 (Baidu) \u0438 30 \u0442\u044b\u0441\u044f\u0447 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0438\u0437 1000 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0441 SamMobile, \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e 12706 (8.5%) […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-76851","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rezultatet e analiz\u00ebs s\u00eb backdoor-ve n\u00eb aplikacionet p\u00ebr Android | ProHoster","description":"K\u00ebrkuesit e Qendr\u00ebs Helmholtz p\u00ebr Sigurin\u00eb e Informacionit (CISPA), Universitetit t\u00eb Ohio-it dhe Universitetit t\u00eb New York-ut","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f Android | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0426\u0435\u043d\u0442\u0440\u0430 \u0413\u0435\u043b\u044c\u043c\u0433\u043e\u043b\u044c\u0446\u0430 \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISPA), \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0448\u0442\u0430\u0442\u0430 \u041e\u0433\u0430\u0439\u043e \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/rezultaty-analiza-bekdorov-v-prilozheniyah-dlya-android","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-04-05T05:42:20+00:00","article:modified_time":"2020-04-05T05:42:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"76851","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:28:29","updated":"2022-10-07 21:01:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/76851","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=76851"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/76851\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=76851"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=76851"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=76851"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}