Sigurnosni propusti aplikacija za Android operacijski sustav

undergraduate thesis

• Title (english): Security vulnerabilities of applications for Android operating system
• Author: Silvana Bakula
• Mentor: Stjepan Groš (mentor)
• Committee member: Stjepan Groš (predsjednik povjerenstva)
• Committee member: Ivan Kovačević (član povjerenstva)
• Committee member: Karlo Slovenec (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2020-09-01, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Android sustav i aplikacije namijenjene za isti su zbog široke rasprostranjenosti i podataka
kojima raspolažu česta meta napadača. Cilj svakog napada je pronaći ranjivost aplikacije koja
se može zlonamjerno iskoristiti. Temeljni korak prevencije od napada je pisanje sigurnog
koda koji neće sadržavati ranjivosti. Cilj ovog rada je upoznati se s mogućim ranjivostima
aplikacija i načinima na koje ih napadač može iskoristiti. Analiza je provedena na aplikaciji
koja sadrži namjerno umetnute ranjivosti, a ranjivosti su otkrivene statičkom i dinamičkom
analizom aplikacije. Na kraju je testirano koje se od pronađenih ranjivosti mogu, odnosno ne
mogu, pronaći strojnim putem.

Abstract (english)

Android operating system and Android applications are often target for malware attacks due
to their wide distribution and valuable data they have access to. Attacker searches for
application vulnerabilities and after finding a vulnerability, the next step is exploitation. The
best defense against these attacks is to develop secure code that will not contain
vulnerabilities. The goal of this final thesis is to educate about possible application
vulnerabilities and the ways in which an attacker can exploit them. The analysis of possible
vulnerabilities is performed on an application that contains intentionally inserted
vulnerabilities. Vulnerabilities are detected by performing static and dynamic application
analysis. Finally, it is tested which of the vulnerabilities could be detected by using automated
tools.

• Keywords: Android; Android aplikacije; ranjivosti Android aplikacija; ranjivosti Android sustava; zlonamjerni napadi
• Keywords (english): Android; Android application; Application vulnerabilities; Android vulnerabilities; malware attacks
• Language: croatian
• URN:NBN: urn:nbn:hr:168:054534
• Study programme: Title: Computing; Study programme type: university; Study level: undergraduate; Academic / professional title: sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva (sveučilišni/a prvostupnik/ prvostupnica (baccalaureus/baccalaurea) inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-14 20:02:32