MASTG-KNOW-0020: Inter-Process Communication (IPC) Mechanisms

During implementation of a mobile application, developers may apply traditional techniques for IPC (such as using shared files or network sockets). The IPC system functionality offered by mobile application platforms should be used because it is much more mature than traditional techniques. Using IPC mechanisms with no security in mind may cause the application to leak or expose sensitive data.

The following is a list of Android IPC Mechanisms that may expose sensitive data:

• Binder
• AIDL
• Intents
• Content Providers
• Services