English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Zendy Plus

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Zendy Tools

Zendy Open

Cross-app collaboration via inter-component communication is a fundamentalmechanism on Android. Although it brings the benefits such as functionalityreuse and data sharing, a threat called component hijacking is also introduced.By hijacking a vulnerable component in victim apps, an attack app can escalateits privilege for operations originally prohibited. Many prior studies havebeen performed to understand and mitigate this issue, but no defense is beingdeployed in the wild, largely due to the deployment difficulties andperformance concerns. In this paper we present SCLib, a secure componentlibrary that performs in-app mandatory access control on behalf of appcomponents. It does not require firmware modification or app repackaging as inprevious works. The library-based nature also makes SCLib more accessible toapp developers, and enables them produce secure components in the first placeover fragmented Android devices. As a proof of concept, we design six mandatorypolicies and overcome unique implementation challenges to mitigate attacksoriginated from both system weaknesses and common developer mistakes. Ourevaluation using ten high-profile open source apps shows that SCLib can protecttheir 35 risky components with negligible code footprint (less than 0.3% stubcode) and nearly no slowdown to normal intra-app communications. The worst-caseperformance overhead to stop attacks is about 5%.

SCLib: A Practical and Lightweight Defense against Component Hijacking in Android Applications