• Cite Icon91
  • https://doi.org/10.1145/2660267.2660295Copy DOI Icon

A11y Attacks

  • Nov 3, 2014
  • Yeongjin Jang +4 more
Show More
  • Abstract
  • Literature Map
  • References
  • Citations
  • Similar Papers
Abstract

Driven in part by federal law, accessibility (a11y) support for disabled users is becoming ubiquitous in commodity OSs. Some assistive technologies such as natural language user interfaces in mobile devices are welcomed by the general user population. Unfortunately, adding new features in modern, complex OSs usually introduces new security vulnerabilities. Accessibility support is no exception. Assistive technologies can be defined as computing subsystems that either transform user input into interaction requests for other applications and the underlying OS, or transform application and OS output for display on alternative devices. Inadequate security checks on these new I/O paths make it possible to launch attacks from accessibility interfaces. In this paper, we present the first security evaluation of accessibility support for four of the most popular computing platforms: Microsoft Windows, Ubuntu Linux, iOS, and Android. We identify twelve attacks that can bypass state-of-the-art defense mechanisms deployed on these OSs, including UAC, the Yama security module, the iOS sandbox, and the Android sandbox. Further analysis of the identified vulnerabilities shows that their root cause is that the design and implementation of accessibility support involves inevitable trade-offs among compatibility, usability, security, and (economic) cost. These trade-offs make it difficult to secure a system against misuse of accessibility support. Based on our findings, we propose a number of recommendations to either make the implementation of all necessary security checks easier and more intuitive, or to alleviate the impact of missing/incorrect checks. We also point out open problems and challenges in automatically analyzing accessibility support and identifying security vulnerabilities.

Similar Papers
  • Book Chapter
  • Citations9

Empirical Analysis of Static Code Metrics for Predicting Risk Scores in Android Applications

  • Jan 01, 2018
  • Mamdouh Alenezi +1
  • Research Article
  • Citations12

A population approach to understanding children's access to assistive technology

  • Jan 01, 2009
  • Disability and Rehabilitation
  • R E Benedict +1
  • Research Article
  • Citations7

Associations Between Insurance Provider and Assistive Technology Use for Computer and Electronic Devices 1 Year After Tetraplegia: Findings From the Spinal Cord Injury Model Systems National Database

  • Jul 24, 2019
  • Archives of Physical Medicine and Rehabilitation
  • Kimberley R Monden +10
  • Conference Article

EagerMerge: an optimistic technique for efficient points-to analysis

  • Jul 18, 2016
  • Sudhir Samrit +1
  • Conference Article
  • Citations6

Assistive Technology for Children with Learning Disabilities: A Systematic Literature Review

  • Jan 03, 2023
  • Ahmad Haiqal Abd Khalid +5
  • Research Article
  • Citations21

A systematic review of the utility of assistive technologies for SEND students in schools

  • Feb 11, 2025
  • Frontiers in Education
  • Kaussar Mukhtarkyzy +6
  • Book Chapter

Applications on mobile devices as a new possibility of assistive technology for reading and writing activities

  • Mar 17, 2023
  • Wanessa Ferreira Borges +1
  • Research Article
  • Citations1

Exploring the possibilities of using assistive technology for people with multiple sclerosis

  • Feb 26, 2025
  • Technology and Disability
  • Sanela Slavković +2
  • Research Article
  • Citations18

Line-by-line spectroscopic simulations on graphics processing units

  • Sep 14, 2007
  • Computer Physics Communications
  • Sylvain Collange +2
  • Book Chapter
  • Citations1

Assistive Technology Utilization

  • Jan 01, 2022
  • Hwa Lee +1
  • Research Article

Applying Human Factors Engineering : Naturally Safe Software–User Interfaces

  • Jan 01, 2013
  • Biomedical Instrumentation & Technology
  • Michael Wiklund +1
  • Book Chapter
  • Citations1

Identifying Shared Security Vulnerabilities and Mitigation Strategies at the Intersection of Application Programming Interfaces (APIs), Application-Level and Operating System (OS) of Mobile Devices

  • Oct 13, 2022
  • Anteneh Girma +2
  • Research Article
  • Citations1

TECNOLOGIAS ASSISTIVAS NA EDUCAÇÃO INCLUSIVA E SUA APLICABILIDADE PARA A INCLUSÃO DE ALUNOS AUTISTAS NAS ESCOLAS

  • Dec 11, 2024
  • LUMEN ET VIRTUS
  • Johnny Pereira Gomes +7
  • Conference Article
  • Citations13

Tradeoffs in cross platform solutions for mobile assistive technology

  • Aug 01, 2013
  • Yanyan Zhuang +4
  • Research Article
  • Citations10

The Rasch Analysis Shows Poor Construct Validity and Low Reliability of the Quebec User Evaluation of Satisfaction with Assistive Technology 2.0 (QUEST 2.0) Questionnaire

  • Jan 06, 2023
  • International Journal of Environmental Research and Public Health
  • Antonio Caronni +8
Cactus Communications logo

Copyright 2026 Cactus Communications. All rights reserved.