{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,15]],"date-time":"2026-01-15T00:39:57Z","timestamp":1768437597348,"version":"3.49.0"},"reference-count":21,"publisher":"Springer Science and Business Media LLC","issue":"6","license":[{"start":{"date-parts":[[2021,1,19]],"date-time":"2021-01-19T00:00:00Z","timestamp":1611014400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2021,1,19]],"date-time":"2021-01-19T00:00:00Z","timestamp":1611014400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100012389","name":"National Institute of Information and Communications Technology","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100012389","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2021,12]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Many Android apps employ WebView, a component that enables the display of web content in the apps without redirecting users to web browser apps. However, WebView might also be used for cyberattacks. Moreover, to the best of our knowledge, although some countermeasures based on access control have been reported for attacks exploiting WebView, no mechanism for monitoring web access via WebView has been proposed and no analysis results focusing on web access via WebView are available. In consideration of this limitation, we propose a web access monitoring mechanism for Android WebView to analyze web access via WebView and clarify attacks exploiting WebView. In this paper, we present the design and implementation of this mechanism by modifying Chromium WebView without any modifications to the Android framework or Linux kernel. The evaluation results of the performance achieved on introducing the proposed mechanism are also presented here. Moreover, the result of threat analysis of displaying a fake virus alert while browsing websites on Android is discussed to demonstrate the effectiveness of the proposed mechanism.<\/jats:p>","DOI":"10.1007\/s10207-020-00534-3","type":"journal-article","created":{"date-parts":[[2021,1,19]],"date-time":"2021-01-19T10:03:50Z","timestamp":1611050630000},"page":"833-847","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Web access monitoring mechanism via Android WebView for threat analysis"],"prefix":"10.1007","volume":"20","author":[{"given":"Yuta","family":"Imamura","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rintaro","family":"Orito","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hiroyuki","family":"Uekawa","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kritsana","family":"Chaikaew","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pattara","family":"Leelaprute","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Masaya","family":"Sato","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6226-5715","authenticated-orcid":false,"given":"Toshihiro","family":"Yamauchi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2021,1,19]]},"reference":[{"key":"534_CR1","unstructured":"Wikipedia: Android (operating system). https:\/\/en.wikipedia.org\/wiki\/Android$$\\_$$\\$operating$$\\_$$system)#Market$$\\_$$share\\$ (2019). Accessed 24 Dec 2019"},{"key":"534_CR2","doi-asserted-by":"crossref","unstructured":"Mobile Threat Report: McAfee Mobile Threat Report Q1, 2018. https:\/\/www.mcafee.com\/enterprise\/en-us\/assets\/reports\/rp-mobile-threat-report-2018.pdf (2018). Accessed 4 June 2019","DOI":"10.1016\/S1353-4858(18)30122-3"},{"key":"534_CR3","unstructured":"Wandera: Android Malware: 4 Ways Hackers are Infecting Phones with Viruses. https:\/\/www.wandera.com\/malware-on-android\/ (2018). Accessed 4 June 2019"},{"key":"534_CR4","doi-asserted-by":"crossref","unstructured":"Luo, T., Hao, H., Du, W., Wang, Y., Yin, H.: Attacks on WebView in the Android system. In: Proceedings of the 27th Annual Computer Security Applications Conference (ACSAC\u201911), pp. 343\u2013352 (2011)","DOI":"10.1145\/2076732.2076781"},{"key":"534_CR5","unstructured":"Mutchler, P., Doup\u00e9, A., Mitchell, J., Kruegel, C., Vigna, G.: A large-scale study of mobile Web App security. In: Proceedings of the Mobile Security Technologies Workshop (MoST\u201915) (2015)"},{"key":"534_CR6","doi-asserted-by":"crossref","unstructured":"Jin, X., Wang, L., Luo, T., Du, W.: Fine-grained access control for HTML5-based mobile applications in Android. In: Proceedings of the 16th Information Security Conference (ISC\u201913), pp. 309\u2013318 (2013)","DOI":"10.1007\/978-3-319-27659-5_22"},{"issue":"4","key":"534_CR7","doi-asserted-by":"publisher","first-page":"807","DOI":"10.1587\/transinf.2014ICL0001","volume":"E98\u2013D","author":"J Yu","year":"2015","unstructured":"Yu, J., Yamauchi, T.: Access control to prevent malicious JavaScript code exploiting vulnerabilities of WebView in Android OS. IEICE Trans. Inf. Syst. E98\u2013D(4), 807\u2013811 (2015)","journal-title":"IEICE Trans. Inf. Syst."},{"key":"534_CR8","doi-asserted-by":"crossref","unstructured":"Tuncay, G.S., Demetriou, S., Gunter, C.A.: Draco: a system for uniform and fine-grained access control for web code on Android. In: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security (CCS\u201916), pp. 104\u2013115 (2016)","DOI":"10.1145\/2976749.2978322"},{"key":"534_CR9","first-page":"396","volume":"26","author":"N Kudo","year":"2018","unstructured":"Kudo, N., Yamauchi, T., Austin, T.H.: Access control mechanism to mitigate cordova plugin attacks in hybrid applications. J. Inf. Process. 26, 396\u2013405 (2018)","journal-title":"J. Inf. Process."},{"key":"534_CR10","doi-asserted-by":"crossref","unstructured":"Li, T., Wang, X., Zha, M. et al.: Unleashing the walking dead: understanding cross-app remote infections on mobile WebViews. In: Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security (CCS\u201917), pp. 829\u2013844 (2017)","DOI":"10.1145\/3133956.3134021"},{"key":"534_CR11","doi-asserted-by":"crossref","unstructured":"Yang, G., Huang, J., Gu, G.: Automated generation of event-oriented exploits in Android Hybrid Apps. In: Proceedings of the Network and Distributed System Security Symposium (NDSS\u201918), pp. 1\u201315 (2018)","DOI":"10.14722\/ndss.2018.23236"},{"key":"534_CR12","doi-asserted-by":"crossref","unstructured":"Son, S., Kim, D., Shmatikov, V.: What mobile ads know about mobile users. In: Proceedings of the Network and Distributed System Security Symposium (NDSS\u201916), pp. 1\u201315 (2016)","DOI":"10.14722\/ndss.2016.23407"},{"key":"534_CR13","unstructured":"Neugschwandtner, M., Lindorfer, M., Platzer, C.: A View to a Kill: WebView Exploitation. In: Proceeding of the 6th USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET\u201913) (2013)"},{"key":"534_CR14","unstructured":"Luo, T., Du, W., Wang, Y.: Attacks and countermeasures for webview on mobile systems. Ph.D. Dissertation. Syracuse University (2014)"},{"issue":"2","key":"534_CR15","first-page":"1","volume":"2","author":"AB Bhavani","year":"2013","unstructured":"Bhavani, A.B.: Cross-site scripting attacks on android WebView. Int. J. Comput. Sci. Netw. 2(2), 1\u20135 (2013)","journal-title":"Int. J. Comput. Sci. Netw."},{"key":"534_CR16","doi-asserted-by":"crossref","unstructured":"Bao, W., Yao, W., Zong, M., Wang, D.: Cross-site scripting attacks on android hybrid applications. In: Proceedings of the 2017 International Conference on Cryptography, Security and Privacy (ICCSP\u201917), pp. 56\u201361 (2017)","DOI":"10.1145\/3058060.3058076"},{"key":"534_CR17","unstructured":"Trend Micro: Social media malware on the rise. https:\/\/blog.trendmicro.com\/social-media-malware-on-the-rise\/ (2015). Accessed 4 June 2019"},{"key":"534_CR18","unstructured":"CalyptixSecurity: Social Media Threats: Facebook Malware, Twitter Phishing, and More. https:\/\/www.calyptix.com\/top-threats\/social-media-threats-facebook-malware-twitter-phishing\/ (2017). Accessed 4 June 2019"},{"key":"534_CR19","unstructured":"WebKit: Open Source Browser Engine. https:\/\/webkit.org\/ (2019). Accessed 6 Feb 2019"},{"key":"534_CR20","unstructured":"Google: The Chromium project. https:\/\/www.chromium.org\/. Accessed 6 Feb 2019"},{"key":"534_CR21","unstructured":"Google: The Chromium project, NetworkStack. https:\/\/www.chromium.org\/developers\/design-documents\/network-stack\/. Accessed 6 Feb (2019)"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-020-00534-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-020-00534-3\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-020-00534-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,10,19]],"date-time":"2021-10-19T03:19:30Z","timestamp":1634613570000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-020-00534-3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,1,19]]},"references-count":21,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2021,12]]}},"alternative-id":["534"],"URL":"https:\/\/doi.org\/10.1007\/s10207-020-00534-3","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,1,19]]},"assertion":[{"value":"19 January 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Compliance with ethical standards"}},{"value":"The authors declare that they have no conflicts of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}