Malevolent app pairs: An android permission overpassing scheme

This source preferred by Vasilis Katos

This data was imported from Scopus:

Authors: Dimitriadis, A., Efraimidis, P.S. and Katos, V.

Journal: 2016 ACM International Conference on Computing Frontiers - Proceedings

Pages: 431-436

ISBN: 9781450341288

DOI: 10.1145/2903150.2911706

© 2016 Copyright held by the owner/author(s). Portable smart devices potentially store a wealth of information of personal data, making them attractive targets for data exfiltration attacks. Permission based schemes are core security controls for reducing privacy and security risks. In this paper we demonstrate that current permission schemes cannot effectively mitigate risks posed by covert channels. We show that a pair of apps with different permission settings may collude in order to effectively create a state where a union of their permissions is obtained, giving opportunities for leaking sensitive data, whilst keeping the leak potentially unnoticed. We then propose a solution for such attacks.

The data on this page was last updated at 04:43 on March 22, 2018.