osirislab / Project-Ideas

A place to discuss potential projects for students of the ISIS Lab.
384 stars 79 forks source link

Android's Binder Vulnerability Research #11

Open NitinJami opened 11 years ago

NitinJami commented 11 years ago

Abstract: Android's Intents are a way of communication that takes place between the app's components. The communication can be within a single app or can be with other apps in the system. Intent's are a two layer abstraction of what the actual Inter-Process Communication (IPC) mechanism is being performed on the low level(Kernel). Binder kernel module in the Android's architecture is responsible for all the IPC communications. It would be interesting to see how the marshaling and un-marshaling takes place, and if any vulnerability is present, it would lead intents being passed to other app's than intended, or worse an arbitary code execution.

Short-Term Goals:

Long-Term Goals:

Reference: