9 November 2026Concept · Digital Identity · Mobile Security Self-Ident Proof of Concept Passport photo from the chip, guided portrait capture and face comparison – entirely on the smartphone.
2 November 2026Analysis · Mobile Security Power Side Channels on Mobile Devices How a public charging cable reveals what is happening on a smartphone.
12 January 2026Analysis · Web & Cloud · Mobile Security Man-In-The-Middle Attacks against Wi-Fi Wireless network communication via Wi-Fi has today become a taken-for-granted part of everyday life.
22 April 2025Analysis · Mobile Security Implementation and Evaluation of Novel Juice Jacking Attacks Juice jacking was deemed obsolete; this project bypasses user confirmation dialogs and extracts data even from current mobile devices.
10 February 2025Analysis · Mobile Security · Privacy & Crypto Security Analysis of Native Cryptography in Android Apps More and more Android apps embed native cryptography such as OpenSSL, yet existing tools only detect errors in Java code.
11 November 2024Analysis · Mobile Security Security Analysis of Data Migration Solutions for Mobile Devices Data migration apps from two major vendors are deeply integrated into the OS – the analysis found security issues and reported exploits.
30 September 2024Analysis · Mobile Security · Privacy & Crypto Analysis of Fingerprinting Libraries on Android Fingerprinting libraries recognise users across apps – which device data they collect and how changes to Android's API could prevent it.
16 August 2024Overview · Mobile Security · Privacy & Crypto Analysis of the Permission System of Android Android controls app access to camera, location and contacts through permissions – how this system is built and changed across versions.
23 July 2024Analysis · Mobile Security Security Analysis of new Sideloading Possibilities on iOS 17.4 / iPadOS 18 The DMA forces Apple to allow apps from other sources – how does iOS 17.4 change the platform's security architecture as a result?
17 June 2024Analysis · Mobile Security · Privacy & Crypto Analysis of the Android Privacy Sandbox Android's SDK Runtime is meant to isolate ad libraries from apps – which data for device fingerprinting remains accessible?
17 May 2024Overview · Mobile Security Potential Covert Channel Through Kernel Samepage Merging on Android Kernel Samepage Merging shares identical memory pages between processes; on Android it could enable new covert and side channels.
2 April 2024Analysis · Mobile Security Influence of changes to the runtime environment on Android applications Runtime changes make device fingerprinting harder; a test with 120 popular Android apps shows most of them keep working.
25 January 2024Overview · Mobile Security State of the Art Juice Jacking Attacks and Countermeasures for Mobile Devices Tampered charging cables at public stations can steal data or install malware: an overview of attacks and countermeasures.
22 January 2024Overview · Privacy & Crypto · Mobile Security Evaluating the “Secure Aggregation” Aspect in Privacy-Preserving “Federated Machine Learning” Secure aggregation keeps individual devices' model updates private in federated learning; the report compares SecAgg and three successors.
29 December 2023Analysis · Mobile Security · Privacy & Crypto Analysis of the Android Health Connect Programming Interface How apps access health data on Android via Health Connect, and how much control users have over that access.
1 December 2023Analysis · Mobile Security · Privacy & Crypto Reducing the Fingerprintability of Android Smartphones Automatically generated app patches align device information on Android to reduce fingerprinting, without changing the device itself.
23 October 2023Analysis · Mobile Security Detection of emulators in malware analysis on Android Malware can detect emulators and hide during analysis; which differences from real Android devices give them away.
26 September 2023Analysis · Mobile Security State of the Art Black Box UI Testing of Android Applications Most testers just feed Android apps random input; this comparison shows what new black box UI testing approaches achieve.
25 July 2023Overview · Mobile Security Investigation of the Content Provider Interface on Android Content providers control data access between apps on Android; how they work and which vulnerabilities have been found.
9 May 2023Analysis · Transparency · Mobile Security Analysis of Android Code Transparency Since AAB, Google Play signs the app packages itself; this analysis checks whether Code Transparency prevents manipulation by app stores.
28 April 2023Analysis · Mobile Security · Privacy & Crypto Comparison of the Fingerprintability of Android and iOS Apps can still fingerprint devices despite restricted identifiers; which information sources do Android and iOS offer for this?
28 April 2023Analysis · Mobile Security · Privacy & Crypto Privacy comparison between paid and free apps A comparison of permissions and data safety declarations shows whether paid Android apps offer better privacy than free ones.
15 February 2023Analysis · Mobile Security · Privacy & Crypto Detecting Inconsistencies between Android App Descriptions and Permissions A Transformer model checks whether Android app descriptions justify the requested permissions, based on 46,000+ app descriptions.
13 February 2023Analysis · Transparency · Mobile Security Runtime Integrity Checks in Android Applications Runtime integrity checks hamper reverse engineering of Android apps; a study measures their prevalence in 99 popular apps.
26 January 2023Analysis · Mobile Security · Web & Cloud Prevalence of HTTP in Android applications Some Android apps still use unencrypted HTTP, letting man-in-the-middle attackers easily extract sensitive data such as account data.
