NDLI: Apex: extending Android permission model and enforcement with user-defined runtime constraints

Please wait, while we are loading the content...

Data protection in outsourcing scenarios: issues and directions

Towards publishing recommendation data with predictive anonymization

Attribute-based signature and its applications

Region-based BGP announcement filtering for improved BGP security

Preventing drive-by download via inter-module communication monitoring

An opportunistic authority evaluation scheme for data security in crisis management scenarios

Cap unification: application to protocol security modulo homomorphic encryption

A logic for authorization provenance

binOb+: a framework for potent and stealthy binary obfuscation

K-anonymous association rule hiding

Apex: extending Android permission model and enforcement with user-defined runtime constraints

A lattice-based approach to mashup security

Restoring compromised privacy in micro-data disclosure

Dynamic fully forward-secure group signatures

Fast-flux service network detection based on spatial snapshot mechanism for delay-free detection

A solution for the automated detection of clickjacking attacks

Effective trust management through a hybrid logical and relational approach

SSLock: sustaining the trust on entities brought by SSL

Risk-based access control systems built on fuzzy inferences

Secure provenance: the essential of bread and butter of data forensics in cloud computing

Controlling data disclosure in computational PIR protocols

A hotspot-based protocol for attack traceback in mobile ad hoc networks

Securely outsourcing linear algebra computations

Identity-based encryption based on DHIES

Securing wireless sensor networks against large-scale node capture attacks

PAriCheck: an efficient pointer arithmetic checker for C programs

Toward practical authorization-dependent user obligation systems

Computationally secure two-round authenticated message exchange

Attribute based data sharing with attribute revocation

RunTest: assuring integrity of dataflow processing in cloud computing infrastructures

Cryptographic role-based security mechanisms based on role-key hierarchy

Practical ID-based encryption for wireless sensor network

Bureaucratic protocols for secure two-party sorting, selection, and permuting

PriMa: an effective privacy protection mechanism for social networks

A game theoretic model for digital identity and trust in online communities

Oblivious enforcement of hidden information release policies

Scene tagging: image-based CAPTCHA using image composition and object relationships

Apex: extending Android permission model and enforcement with user-defined runtime constraints

Content Provider	ACM Digital Library
Author	Nauman, Mohammad Khan, Sohail Zhang, Xinwen
Abstract	Android is the first mass-produced consumer-market open source mobile platform that allows developers to easily create applications and users to readily install them. However, giving users the ability to install third-party applications poses serious security concerns. While the existing security mechanism in Android allows a mobile phone user to see which resources an application requires, she has no choice but to allow access to all the requested permissions if she wishes to use the applications. There is no way of granting some permissions and denying others. Moreover, there is no way of restricting the usage of resources based on runtime constraints such as the location of the device or the number of times a resource has been previously used. In this paper, we present Apex -- a policy enforcement framework for Android that allows a user to selectively grant permissions to applications as well as impose constraints on the usage of resources. We also describe an extended package installer that allows the user to set these constraints through an easy-to-use interface. Our enforcement framework is implemented through a minimal change to the existing Android code base and is backward compatible with the current security mechanism.
Starting Page	328
Ending Page	332
Page Count	5
File Format	PDF
ISBN	9781605589367
DOI	10.1145/1755688.1755732
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2010-04-13
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Constraints Mobile platforms Policy framework Android
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Apex: extending android permission model and enforcement with user-defined runtime constraints.

Apex: Extending Android Permission Model and Enforcement with User-defined Runtime Constraints

Short paper: enhancing mobile application permissions with runtime feedback and constraints

A Formal Model to Analyze the Permission Authorization and Enforcement in the Android Framework

An Android runtime security policy enforcement framework

PeMo: Modifying application's permissions and preventing information stealing on smartphones

PERUIM: understanding mobile application privacy with permission-UI mapping

Permission-based security in android application: from policy expert to end user

Runtime verification and enforcement for Android applications with RV-Droid (2013)

Apex: extending Android permission model and enforcement with user-defined runtime constraints

Similar Documents

Apex: extending android permission model and enforcement with user-defined runtime constraints.

Apex: Extending Android Permission Model and Enforcement with User-defined Runtime Constraints

Short paper: enhancing mobile application permissions with runtime feedback and constraints

A Formal Model to Analyze the Permission Authorization and Enforcement in the Android Framework

An Android runtime security policy enforcement framework

PeMo: Modifying application's permissions and preventing information stealing on smartphones

PERUIM: understanding mobile application privacy with permission-UI mapping

Permission-based security in android application: from policy expert to end user

Runtime verification and enforcement for Android applications with RV-Droid (2013)

Apex: extending Android permission model and enforcement with user-defined runtime constraints