A Technique to Steal OAuth Tokens in Android-Based Devices Using a Malicious Application

Topare, Rajendra Yashwant (2023) A Technique to Steal OAuth Tokens in Android-Based Devices Using a Malicious Application. Masters thesis, Dublin, National College of Ireland.

Preview	PDF (Master of Science) Download (1MB) | Preview
Preview	PDF (Configuration manual) Download (748kB) | Preview

Abstract

The OAuth protocol is used to authorize and authenticate access to third-party services. But its implementation in Android-based mobile devices is vulnerable to attacks, which allows attackers to get unauthorized access to private information. This research demonstrates a new technique to capture OAuth tokens using a malicious Android application while accessing third-party applications using a Facebook login. It presents useful insights into the different strategies used by cybercriminals to obtain OAuth tokens and highlights flaws in existing security mechanisms. It highlights the need for the development of new countermeasures to mitigate these threats. These insights can be utilized by mobile app developers to improve app security while protecting user data.

Item Type:	Thesis (Masters)
Supervisors:	Name Email Sahni, Vikas UNSPECIFIED
Uncontrolled Keywords:	Mobile Threats; OAuth tokens; Android Security
Subjects:	Q Science > QA Mathematics > Electronic computers. Computer science T Technology > T Technology (General) > Information Technology > Electronic computers. Computer science Q Science > QA Mathematics > Computer software > Computer Security T Technology > T Technology (General) > Information Technology > Computer software > Computer Security Q Science > QA Mathematics > Computer software > Mobile Phone Applications T Technology > T Technology (General) > Information Technology > Computer software > Mobile Phone Applications
Divisions:	School of Computing > Master of Science in Cyber Security
Depositing User:	Tamara Malone
Date Deposited:	06 Nov 2024 17:30
Last Modified:	06 Nov 2024 17:30
URI:	https://norma.ncirl.ie/id/eprint/7157

Actions (login required)

View Item