Leaky Apps: Large-scale Analysis of Secrets Distributed in Android and iOS Apps

David Schmidt; Sebastian Schrittwieser; Edgar R. Weippl

doi:10.1145/3719027.3765033

CCS2025顶会

Leaky Apps: Large-scale Analysis of Secrets Distributed in Android and iOS Apps

David Schmidt, Sebastian Schrittwieser, Edgar R. Weippl

DOI 出版方

2025年份

3顶会引用

摘要

Mobile apps store various types of secrets to support their functionalities. These include API keys, and cryptographic material to authenticate users and access backend services. Once distributed, attackers can reverse-engineer the apps, and these secrets become accessible, posing risks such as data leaks, and service abuse.