Toward discovering and exploiting private server-side Web API

网络与信息安全学报

卷:2

Shan-qing GUO¹  Jia CHEN² 

[1] School of Computer Science and Technology,Shandong University,Jinan 250101,China ;

[2] School of Computer Science and Technology,Shandong University,Jinan 250101,China;

关键词: web api;    android app;    static analysis;    dynamic analysis;   

DOI  :  10.11959/j.issn.2096-109x.2016.00134

来源: DOAJ

【 摘 要 】

Most of the interfaces for mobile application and server interaction use the Web API for communication,but the Web API introduced by these mobile applications may introduce new security issues.To facilitate the study of the security of Web API,a system for automatically discovering the server-side Web API interface in APK files based on the conventional Android program testing framework was designed and implemented.This system can help to develop the research on private server-side Web API interface security.

【 授权许可】

Unknown