Session Fingerprinting in Android via Web-to-App Intercommunication

<table class="fixed-width table-group" id="tab2"><tr><td><table class="table"><colgroup><col style="width:15.41em"/><col style="width:16.99em"/></colgroup><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr class="thead"><td class="align_left"><b>Method</b></td><td class="align_center"><b>API level</b></td></tr><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr><td class="align_left">Location</td><td class="align_center"><span style="width: 17.6545ptpx;"><svg height="8.98582pt" id="M3" style="vertical-align:-0.6370001pt" version="1.1" viewbox="-0.0498162 -8.34882 17.6545 8.98582" width="17.6545pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M512 230V281L75 514V456L453 256V254L75 55V-3L512 230Z" id="g117-92"></path></g><g transform="matrix(.013,0,0,-0.013,11.263,0)"><path d="M384 0V27C293 34 287 42 287 114V635C232 613 172 594 109 583V559L157 557C201 555 205 550 205 499V114C205 42 199 34 109 27V0H384Z" id="g113-50"></path></g></svg></span></td></tr><tr><td class="align_left">Browser fingerprinting</td><td class="align_center">Browser specific. Native WebView <svg height="8.98582pt" id="M4" style="vertical-align:-0.6370001pt" version="1.1" viewbox="-0.0498162 -8.34882 23.9179 8.98582" width="23.9179pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M512 230V281L75 514V456L453 256V254L75 55V-3L512 230Z" id="g117-92"></path></g><g transform="matrix(.013,0,0,-0.013,11.263,0)"><path d="M412 140C382 77 369 73 315 73H129L270 222C362 320 402 379 402 466C402 571 322 635 234 635C177 635 130 609 99 576L42 495L64 475C90 514 133 568 201 568C274 568 318 519 318 435C318 349 255 267 193 193C144 135 87 78 32 23V0H405C417 45 427 89 440 131L412 140Z" id="g113-51"></path></g><g transform="matrix(.013,0,0,-0.013,17.503,0)"><path d="M241 635C89 635 35 457 35 312C35 153 89 -12 240 -12C390 -12 443 166 443 312C443 466 390 635 241 635ZM238 602C329 602 354 454 354 312C354 172 330 22 240 22C152 22 124 173 124 313S148 602 238 602Z" id="g113-49"></path></g></svg></td></tr><tr><td class="align_left">App and deep links</td><td class="align_center"><span style="width: 17.6545ptpx;"><svg height="8.98582pt" id="M5" style="vertical-align:-0.6370001pt" version="1.1" viewbox="-0.0498162 -8.34882 17.6545 8.98582" width="17.6545pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M512 230V281L75 514V456L453 256V254L75 55V-3L512 230Z" id="g117-92"></path></g><g transform="matrix(.013,0,0,-0.013,11.263,0)"><path d="M384 0V27C293 34 287 42 287 114V635C232 613 172 594 109 583V559L157 557C201 555 205 550 205 499V114C205 42 199 34 109 27V0H384Z" id="g113-50"></path></g></svg></span></td></tr><tr><td class="align_left">Direct App to Web communication</td><td class="align_center"><span style="width: 17.6545ptpx;"><svg height="8.98582pt" id="M6" style="vertical-align:-0.6370001pt" version="1.1" viewbox="-0.0498162 -8.34882 17.6545 8.98582" width="17.6545pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M512 230V281L75 514V456L453 256V254L75 55V-3L512 230Z" id="g117-92"></path></g><g transform="matrix(.013,0,0,-0.013,11.263,0)"><path d="M384 0V27C293 34 287 42 287 114V635C232 613 172 594 109 583V559L157 557C201 555 205 550 205 499V114C205 42 199 34 109 27V0H384Z" id="g113-50"></path></g></svg></span></td></tr><tr class="table-tr"><td colspan="2"><hr class="tbody-hr"/></td></tr></table></td></tr></table>

<div>Privacy exposure to the described threats per API level.</div>

Security and Communication Networks

tab2

Table 2

Table 2: Session Fingerprinting in Android via Web-to-App Intercommunication 