Secure and flexible message-based communication for mobile apps within and across devices

In modern mobile platforms, message-based communication is afflicted by data leakage attacks, through which untrustworthy apps access the transferred message data. Existing defenses are overly restrictive, as they block all suspicious message exchanges, thus preventing any app from receiving messages. To better secure message-based communication, we present a model that strengthens security, while also allowing untrusted-but-not-malicious apps to execute their business logic. Our model, , introduces two novel mechanisms: idden ransmission and olymorphic integrates and encryption. We concretely realize as mitigates three classic Android data leakage attacks, while allowing untrusted apps to perform useful operations on delivered messages. Our evaluation shows that supports secure message-based communication within and across devices by trading off performance costs, programming effort overheads, and security.