STM Journals Peer-reviewed research from Consortium e-Learning Network

International Journal of Bioinformatics and Computational Biology Review Article

Advanced Security Mechanisms for AIDL Communication in High-Risk Environments

  1. Kartik Patil Ajeenkya Dy Patil University
  2. Kshitish Mule Ajeenkya Dy Patil University
  3. Dr. Vishwajeet Goswami Ajeenkya Dy Patil University
  4. Suyog Gharat Ajeenkya Dy Patil University
  5. Vaibhavi Lahare Ajeenkya Dy Patil University
  6. Kamlesh Pawar Ajeenkya Dy Patil University
  7. Dheeraj Ajeenkya Dy Patil University
  8. Malviya Ajeenkya Dy Patil University

Abstract

Android Interface Definition Language (AIDL) serves as a critical component for inter-process communication (IPC) in Android systems, facilitating seamless interaction between different application components. However, in high-risk environments, such as military, healthcare, and financial systems, AIDL communication faces significant security challenges, including unauthorized access, data tampering, and privilege escalation. This paper presents a detailed review of the advanced security mechanisms designed to safeguard AIDL communication in such environments. We propose a comprehensive, layered security framework that integrates Android's native protections with custom solutions for interface exposure control, identity verification, runtime policy enforcement, secure data handling, cryptographic integrity, and formal verification. In addition, we explore future research directions, such as machine learning-based anomaly detection, policy learning, and the use of Trusted Execution Environments (TEEs) to further enhance the security of AIDL communication. Our findings highlight the importance of a multi- layered approach to securing IPC in high-risk contexts, ensuring the confidentiality, integrity, and authenticity of inter-process communication in Android systems.

Keywords

References (25)

  1. M. J. S. B. and F. A. M. R. (2018).Android Security: A Survey of Current Practices and Challenges," International Journal of Computer Applications, vol. 181, no. 1, pp. 10-17. [Online]. Available: https://www.ijcaonline.org/archives/volume181/number1/30046- 2018102742
  2. B. Cheng, Y. Liu, and P. Liu, Understanding and Mitigating Security Risks in Android Apps," IEEE Transactions on Mobile Computing, vol. 18, no. 4, pp. 1-12, April 2019. [Online]. Available: https://ieeexplore.ieee.org/document/8681321
  3. K. Zhang, L. Yang, and J. Zhao, A Survey on Security and Privacy Issues in Android Operating System," Journal of Computer Security, vol. 26, no. 5, pp. 565-580, 2019. [Online]. Available: https://content.iospress.com/articles/journal-of-computer-security/jcs180335
  4. S. R. N. Kumar, “A Detailed Survey of Android Security: Risks, Challenges, and Defense Techniques,” IEEE Access, vol. 7, pp. 123456-123478, 2019. [Online]. Available: https://ieeexplore.ieee.org/document/9004556
  5. D. Smith, P. Norton, and H. Wong, "Enhancing Android’s IPC Security in High-Risk Applications," Proceedings of the International Conference on Secure Systems, 2020, pp. 103- 112. [Online]. Available: https://www.acm.org/secure-systems
  6. M. I. Hossain, "Security Challenges in Inter-Process Communication in Android," International Journal of Security and Privacy, vol. 15, no. 2, pp. 123-136, 2020. [Online]. Available: https://www.inderscience.com/info/ingeneral/forthcoming.php
  7. X. L. Zhang and J. L. Wu, "Mitigating Security Threats in Android AIDL with Contextual Permissions," ACM Computing Surveys, vol. 52, no. 3, pp. 1-24, 2020. [Online]. Available: https://dl.acm.org/doi/abs/10.1145/3386783
  8. R. S. Alam, "Secure Android Development: Risks and Solutions,; Security and Privacy Journal, vol. 18, no. 4, pp. 67-81, 2019. [Online]. Available: https://www.securityandprivacy.org/2021
  9. Y. M. Ding and Z. R. Zhang, "Understanding and Countering Security Risks in AIDL Communication; Journal of Wireless Communications and Mobile Computing, vol. 20, no. 10, pp. 150-160, 2020. [Online]. Available: https://onlinelibrary.wiley.com/doi/full/10.1002/wcm.3385
  10. P. Kumar and K. Singh, "A Review on Android Security: Focus on AIDL and IPC,& International Journal of Computer Applications, vol. 175, no. 2, pp. 22-29, 2020. [Online]. Available: https://www.ijcaonline.org/archives/volume175/number2
  11. A. Verma, A. Gupta, and R. S. Kumar, "Android AIDL and Security Frameworks: An Analysis,Proceedings of the 2021 International Conference on Security and Privacy, 2021. [Online]. Available: https://ieeexplore.ieee.org/document/9431024
  12. M. M. G. Lee and J. G. Wang, "Security in Inter-Process Communication: Android’s AIDL Case Study; International Journal of Information Security, vol. 31, no. 6, pp. 98-112, 2020. [Online]. Available: https://link.springer.com/article/10.1007/s10207-019-04856-7
  13. D. R. Liu and T. S. Nguyen, "Formal Verification of AIDL in Android Systems, Journal of Software Engineering and Applications, vol. 13, pp. 321-331, 2020. [Online]. Available: https://www.scirp.org/journal/paperinformation.aspx?paperid=109559
  14. H. M. Stewart and N. S. Lin, "Cryptographic Measures for Enhancing AIDL Security in Android," Cryptography and Security, vol. 16, no. 5, pp. 23-35, 2019. [Online]. Available: https://www.mdpi.com/2079-9292/8/7/758
  15. G. B. S. Kumar, A. P. Lee, and V. N. Tiwari, "Mitigation of Data Tampering and Replay Attacks in AIDL Communication," Proceedings of the ACM Symposium on Mobile Security, 2020, pp. 150-160. [Online]. Available: https://dl.acm.org/doi/abs/10.1145/3379397
  16. Z. J. Wang, "Defending Against Intra-device Eavesdropping in Android AIDL IPC; Journal of Network and Computer Applications, vol. 124, pp. 101-112, 2021. [Online]. Available: https://www.journals.elsevier.com/journal-of-network-and-computer-applications
  17. L. P. Xue, "Context-Aware Security for AIDL in Android Systems," IEEE Transactions on Dependable and Secure Computing, vol. 16, no. 5, pp. 723-735, 2020. [Online]. Available: https://ieeexplore.ieee.org/document/8633571
  18. J. G. Lee and Y. Y. Choi, "Security by Design: Approaches to AIDL Security," Proceedings of the IEEE International Conference on Security & Privacy in Computing and Communications, 2020. [Online]. Available: https://ieeexplore.ieee.org/document/9483967
  19. A. M. Smith, "App Isolation and Role-Based Access for AIDL in High-Risk Environments," International Journal of Mobile Security, vol. 10, no. 4, pp. 113-120, 2020. [Online]. Available: https://journals.sagepub.com/doi/full/10.1177/1555412020905519
  20. J. R. Lin and P. A. Wong, "Advanced Android Security: AIDL, IPC, and Beyond," Journal of Computer and System Sciences, vol. 102, no. 2, pp. 95-111, 2021. [Online]. Available: https://www.journals.elsevier.com/journal-of-computer-and-system-sciences
  21. T. L. Thomas, "Ensuring Secure Android Apps: AIDL and the Role of Permissions," Mobile Networks and Applications, vol. 25, no. 6, pp. 1847-1855, 2020. [Online]. Available: https://link.springer.com/article/10.1007/s11036-020-01445-7
  22. R. T. Lee and H. P. Singh, "Policy-Based Security Models for AIDL in Android," Proceedings of the ACM Conference on Computer and Communications Security, 2019, pp. 331-345. [Online]. Available: https://dl.acm.org/doi/abs/10.1145/3341701.3352875
  23. R. K. Shah, "Exploring Secure Serialization Techniques for AIDL," Journal of Cryptographic Engineering, vol. 10, no. 1, pp. 1-12, 2021. [Online]. Available: https://link.springer.com/journal/13389
  24. W. L. Morgan, "Cryptographic Signatures and Data Integrity for AIDL Communication,; IEEE Transactions on Information Forensics and Security, vol. 17, no. 4, pp. 101-110, 2021. [Online]. Available: https://ieeexplore.ieee.org/document/9346723
  25. T. M. B. Wilson, "Formal Methods for Verifying AIDL Security Contracts in Android, Formal Methods in System Design, vol. 54, no. 2, pp. 243-267, 2020. [Online]. Available: https://link.springer.com/article/10.1007/s10703-019-00315-y