DMCA
AdSplit: Separating smartphone advertising from applications (2012)
| Venue: | in Proceedings of the 21st USENIX Security Symposium |
| Citations: | 53 - 2 self |
BibTeX
@INPROCEEDINGS{Shekhar12adsplit:separating,
author = {Shashi Shekhar and Michael Dietz and Dan S. Wallach},
title = {AdSplit: Separating smartphone advertising from applications},
booktitle = {in Proceedings of the 21st USENIX Security Symposium},
year = {2012}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
A wide variety of smartphone applications today rely on third-party advertising services, which provide libraries that are linked into the hosting application. This situation is undesirable for both the application author and the advertiser. Advertising libraries require their own permissions, resulting in additional permission requests to users. Likewise, a malicious application could simulate the behavior of the advertising library, forging the user’s interaction and stealing money from the advertiser. This paper describes AdSplit, where we extended Android to allow an application and its advertising to run as separate processes, under separate user-ids, eliminating the need for applications to request permissions on behalf of their advertising libraries, and providing services to validate the legitimacy of clicks, locally and remotely. AdSplit automatically recompiles apps to extract their ad services, and we measure minimal runtime overhead. AdSplit also supports a system resource that allows advertisements to display their content in an embedded HTML widget, without requiring any native code. 1
Keyphrases
advertising library smartphone advertising hosting application separate process additional permission request user interaction smartphone application today wide variety native code separate user-ids malicious application third-party advertising service system resource minimal runtime overhead ad service application author embedded html widget
