kirancodes.me
To Proof Maintenance & Beyond!
ASE 2013

Flow Permissions for Android

Shashank Holavanalli, Don Manuel, Vishwas Nanjundaswamy, Brian Rosenberg, Feng Shen, Steven Y. Ko, Lukasz Ziarek

DOI 10.1109/ase.2013.6693128dblp

Abstract

This paper proposes Flow Permissions, an extension to the Android permission mechanism. Unlike the existing permission mechanism our permission mechanism contains semantic information based on information flows. Flow Permissions allow users to examine and grant explicit information flows within an application (e.g., a permission for reading the phone number and sending it over the network) as well as implicit information flows across multiple applications (e.g., a permission for reading the phone number and sending it to another application already installed on the user's phone). Our goal with Flow Permissions is to provide visibility into the holistic behavior of the applications installed on a user's phone. Our evaluation compares our approach to dynamic flow tracking techniques; our results with 600 popular applications and 1,200 malicious applications show that our approach is practical and effective in deriving Flow Permissions statically.

BibTeX
@inproceedings{Holavanalli-al:ASE13,
  author    = {Shashank Holavanalli and
               Don Manuel and
               Vishwas Nanjundaswamy and
               Brian Rosenberg and
               Feng Shen and
               Steven Y. Ko and
               Lukasz Ziarek},
  title     = {Flow Permissions for Android},
  booktitle = {ASE},
  pages     = {652--657},
  publisher = {{IEEE}},
  year      = {2013},
}

Related papers