Small Changes, Big Changes: An Updated View on the Android Permission System

Author(s):  
Yury Zhauniarovich ◽  
Olga Gadyatskaya
2013 ◽  
Vol 4 (1) ◽  
pp. 16-27 ◽  
Author(s):  
Kyoung Soo Han ◽  
Yeoreum Lee ◽  
Biao Jiang ◽  
Eul Gyu Im

Android uses permissions for application security management. Android also allows inter-application communication (IAC), which enables cooperation between different applications to perform complex tasks by using some components and Intents. In other words, Android provides more flexibility and places less restriction on application development. This is a major feature that differentiates Android from its competitors. However, IAC also facilitates malicious applications that can collude in attacks of privilege escalation. In this paper, the authors demonstrate with case studies that all IAC channels can potentially be utilized for privilege escalation attacks, and the authors propose a refinement to solve this problem by enforcing IAC permissions and exposing IAC to users.


Author(s):  
Zhongwen Zhang ◽  
Yuewu Wang ◽  
Jiwu Jing ◽  
Qiongxiao Wang ◽  
Lingguang Lei

2018 ◽  
Vol 14 (3) ◽  
pp. 324-333
Author(s):  
Ankur Rameshbhai Khunt ◽  
P. Prabu

Author(s):  
Prachi ◽  
Arushi Jain

In recent times, Android phones are the most popular among the users. According to a survey by International Data Corporation (IDC), it is reported that in 2015 Android dominates the smartphone market with 82.8% share, leaving its competitor iOS, Windows and others far behind. This popularity makes it prime target among the malware developers. According to a survey by the F-Secure it has been reported that 99% of new malwares are targeting the Android OS. This is majorly due to coarse grained permissions defined in the Android permission system. Additionally, some malicious applications ask for more than required permissions to exploit the personal and sensitive data of user. The objective of this chapter is twofold: getting familiar with Permission based attacks in Android, applying Reverse Engineering technique on the malicious apk file for controlling permission attacks and removing malicious code from the source code of Android apk file.


2017 ◽  
Vol 30 (5) ◽  
pp. 525-544 ◽  
Author(s):  
Hamid Bagheri ◽  
Eunsuk Kang ◽  
Sam Malek ◽  
Daniel Jackson

Author(s):  
Hamid Bagheri ◽  
Eunsuk Kang ◽  
Sam Malek ◽  
Daniel Jackson
Keyword(s):  

Author(s):  
Elli Fragkaki ◽  
Lujo Bauer ◽  
Limin Jia ◽  
David Swasey
Keyword(s):  

Sign in / Sign up

Export Citation Format

Share Document