论文标题
简单的间谍软件：Android隐形前景服务以及如何（AB）使用它们
Simple Spyware: Androids Invisible Foreground Services and How to (Ab)use Them
论文作者
论文摘要
随着Android Oreo和Pie的发行版，Android引入了应用程序的一些背景执行限制。 Google限制了背景服务的执行，以节省能源并防止应用程序在背景中无休止地运行。此外，更改了对设备传感器的访问，并引入了名为前景服务的新概念。不再允许应用程序以空闲状态运行背景服务，从而阻止应用程序使用设备的资源（如相机）。但是，这些限制不会影响所谓的前景服务，因为它们向用户显示了永久可见的通知，因此可以随时停止用户。我们的研究发现，API中存在缺陷，这允许开始看不见的前景服务，从而导致限制无效。我们将证明发现的缺陷使攻击者可以使用前景服务作为监视用户的工具。
With the releases of Android Oreo and Pie, Android introduced some background execution limitations for apps. Google restricted the execution of background services to save energy and to prevent apps from running endlessly in the background. Moreover, access to the device's sensors was changed and a new concept named foreground service has been introduced. Apps were no longer allowed to run background services in an idle state, preventing apps from using the device's resources like the camera. These limitations, however, would not affect so-called foreground services because they show a permanently visible notification to the user and could therefore be stopped by the user at any time. Our research found out that flaws in the API exists, which allows starting invisible foreground services, making the introduced limitations ineffective. We will show that the found flaws allow attackers to use foreground services as a tool for spying on users.
