@inproceedings{98520b3c8d4b41deaa4c2f02e98c1349,
title = "Casing the Vault: Security Analysis of Vault Applications",
abstract = "Vault applications are a class of mobile apps used to store and hide users' sensitive files (e.g., photos, documents, and even another app) on the phone. In this paper, we perform an empirical analysis of popular vault apps under the scenarios of unjust search and filtration of civilians by authorities (e.g., during civil unrest). By limiting the technical capability of adversaries, we explore the feasibility of inferring the presence of vault apps and uncovering the hidden files without employing sophisticated forensics analysis. Our analysis of 20 popular vault apps shows that most of them do not adequately implement/configure their disguises, which can reveal their existence without technical analysis. In addition, adversaries with rudimentary-level knowledge of the Android system can already uncover the files stored in most of the vault apps. Our results indicate the need for more secure designs for vault apps.",
keywords = "android, privacy, vault app",
author = "Margie Ruffin and Israel Lopez-Toldeo and Kirill Levchenko and Gang Wang",
note = "ACKNOWLEDGMENTS. This work was supported in part by NSF grants 2030521, and the Graduate Research Fellowship Program under Grant No 21-46756.; 21st Workshop on Privacy in the Electronic Society, WPES 2022 ; Conference date: 07-11-2022",
year = "2022",
month = nov,
day = "7",
doi = "10.1145/3559613.3563204",
language = "English (US)",
series = "WPES 2022 - Proceedings of the 21st Workshop on Privacy in the Electronic Society, co-located with CCS 2022",
publisher = "Association for Computing Machinery",
pages = "175--180",
booktitle = "WPES 2022 - Proceedings of the 21st Workshop on Privacy in the Electronic Society, co-located with CCS 2022",
address = "United States",
}