TY - GEN
T1 - Flow permissions for android
AU - Holavanalli, Shashank
AU - Manuel, Don
AU - Nanjundaswamy, Vishwas
AU - Rosenberg, Brian
AU - Shen, Feng
AU - Ko, Steven Y.
AU - Ziarek, Lukasz
PY - 2013
Y1 - 2013
N2 - This paper proposes Flow Permissions, an extension to the Android permission mechanism. Unlike the existing permission mechanism our permission mechanism contains semantic information based on information flows. Flow Permissions allow users to examine and grant explicit information flows within an application (e.g., a permission for reading the phone number and sending it over the network) as well as implicit information flows across multiple applications (e.g., a permission for reading the phone number and sending it to another application already installed on the user's phone). Our goal with Flow Permissions is to provide visibility into the holistic behavior of the applications installed on a user's phone. Our evaluation compares our approach to dynamic flow tracking techniques; our results with 600 popular applications and 1,200 malicious applications show that our approach is practical and effective in deriving Flow Permissions statically.
AB - This paper proposes Flow Permissions, an extension to the Android permission mechanism. Unlike the existing permission mechanism our permission mechanism contains semantic information based on information flows. Flow Permissions allow users to examine and grant explicit information flows within an application (e.g., a permission for reading the phone number and sending it over the network) as well as implicit information flows across multiple applications (e.g., a permission for reading the phone number and sending it to another application already installed on the user's phone). Our goal with Flow Permissions is to provide visibility into the holistic behavior of the applications installed on a user's phone. Our evaluation compares our approach to dynamic flow tracking techniques; our results with 600 popular applications and 1,200 malicious applications show that our approach is practical and effective in deriving Flow Permissions statically.
UR - https://www.scopus.com/pages/publications/84893539369
U2 - 10.1109/ASE.2013.6693128
DO - 10.1109/ASE.2013.6693128
M3 - Conference contribution
AN - SCOPUS:84893539369
SN - 9781479902156
T3 - 2013 28th IEEE/ACM International Conference on Automated Software Engineering, ASE 2013 - Proceedings
SP - 652
EP - 657
BT - 2013 28th IEEE/ACM International Conference on Automated Software Engineering, ASE 2013 - Proceedings
PB - IEEE Computer Society
T2 - 28th IEEE/ACM International Conference on Automated Software Engineering, ASE 2013
Y2 - 11 November 2013 through 15 November 2013
ER -