Generalize Rootless Cross-App Intervention to Splash-Advertisement Pipelines

Establish whether design methodologies for rootless cross-app observation and data mediation can be generalized to the sensor, touch, or navigation paths involved in smartphone splash advertisements.

Background

The paper identifies rootless cross-app intervention as an important research direction for making splash-ad defenses usable by ordinary smartphone users. Existing examples show that user-space applications can observe or influence other applications under particular Android system abstractions: ARMOUR detects another application's zero-permission sensor usage, while Android mock-location providers can replace location data delivered to other applications. These examples demonstrate that cross-app observation and data mediation are technically possible without root access in some settings.

The unresolved issue is whether comparable system-supported techniques can be extended beyond the demonstrated cases to the sensor, touch, and navigation stages of splash-ad activation and redirection. Resolving this question could enable app-agnostic defenses that avoid per-application reverse engineering and reduce the deployment and maintenance burden of root- and rule-dependent tools.

References

These mechanisms demonstrate that rootless cross-app observation and data mediation are technically possible under certain system abstractions, although it remains unclear whether similar design methodologies can be generalized to sensor, touch, or navigation paths involved in splash advertisements.

— Can We Stop The Ads? Taxonomy and Characterization of Smartphone Splash Ads and Existing Countermeasures  (2609.17316 - Zhang et al., 15 Sep 2026) in Section 6.1, “Technical Research Exploration for More Usable Third-Party Tools”