Static analysis tool for identification of permission misuse by android applications

Title

Static analysis tool for identification of permission misuse by android applications

Creator

Karthick S.; Binu S.

Description

Android is one of the most important and widely used mobile operating systems in the world. The Android operating system utilizes the permission-based model, which permits Android applications to get user data, framework data, gadget data and other assets of Smartphone. These permissions are affirmations declared by the developer of an application. The permissions granted varies from one application to another, depending on its functionality. During installation, permissions to access the resources of the smartphone are requested by apps. Once the client grants the permission, the apps are allowed to access the granted resources as per its requirement. Android OS is susceptible to different security issues owing to the loopholes in security. This paper mainly focuses on identifying how the permissions granted to a specific application is misused by another application using SharedUserID. The paper also proposes a security tool that identifies a list of applications which are misusing the permissions in a user's Android smartphone. The viability of the tool is tested by using a Proof-of-Concept (PoC) implementation of the security tool. Research India Publications.

Source

International Journal of Applied Engineering Research, Vol-12, No. 24, pp. 15169-15178.

Date

2017-01-01

Publisher

Research India Publications

Subject

Android; Over-claiming of permissions; Permission misuse; Security attacks; Security threats; Security tool app; SharedUserID

Coverage

Karthick S., Department of Computer Science, Christ University, Hosur Road, Bengaluru, Karnataka, India; Binu S., Department of Computer Science, Christ University, Hosur Road, Bengaluru, Karnataka, India

Rights

Restricted Access

Relation

ISSN: 9734562

Format

Online

Language

English

Type

Article

Identifier

https://www.scopus.com/inward/record.uri?eid=2-s2.0-85048897482&partnerID=40&md5=7887be2ec917a886d856a5a213ca7843