Download Privacy concerns with everyday technologies - mart-e

3.3. ATTACK SCHEMES
An apk file is produced after the compilation of a program and is often proposed
on small projects or for beta versions. Once an application is installed on the system,
the apk file is stored on the system.
Alternative marketplaces
In the same way as the Android Play Store, several alternative marketplaces exist.
Alternative marketplaces enable downloading apk files from a centralised interface.
Like Google Play Store, it has the advantages of a centralised distribution medium
(payment system, users’ reviews, moderation, etc.). Manufacturers or service
providers sometimes sell smartphones with their own marketplace instead of the
Google Play Store.
Debug mode
If the debug mode of an android device is turned on (done in the configuration
settings of the device), interaction between a computer and the device is possible.
Using the official Android Debug Bridge toolkit5 , an application can be installed in
a few seconds from a computer without any notifications or user interactions on the
device connected to a computer (connection typically made using a USB cable).
3.3
Attack schemes
Even though the multiple installation procedures make the propagation of an application easier, they also enable abuses and accelerate the propagation of malware.
Figure 3.3 presents the two different attack types (explained in Section 3.4.1) and
the three different strategies to deploy the attack (explained in Section 3.3.2, 3.3.3
and 3.3.4).
Figure 3.3: Malicious applications propagation possibilities
5
Documentation https://developer.android.com/tools/help/adb.html
33