Non-invasive Privilege Escalation through Mobile and IoT System Interface: Threats and Mitigation