NDLI: Sleeping android: the danger of dormant permissions

Please wait, while we are loading the content...

Security composition in the real world: squaring the circle of mobile security with contemporary device economics

Deadbolt: locking down android disk encryption

Sound and precise malware analysis for android via pushdown reachability and entry-point saturation

Sleeping android: the danger of dormant permissions

A case of collusion: a study of the interface between ad libraries and their apps

Secure enrollment and practical migration for mobile trusted execution environments

Native code execution control for attack mitigation on android

The curse of 140 characters: evaluating the efficacy of SMS spam detection on android

PIN skimmer: inferring PINs through the camera and microphone

Please slow down!: the impact on tor performance from mobility

Securitas: user identification through RGB-NIR camera pair on mobile devices

This network is infected: HosTaGe - a low-interaction honeypot for mobile devices

Passwords and interfaces: towards creating stronger passwords by using mobile phone handsets

AndroTotal: a flexible, scalable toolbox and service for testing mobile malware detectors

Sleeping android: the danger of dormant permissions

Content Provider	ACM Digital Library
Author	Sellwood, James Crampton, Jason
Abstract	An Android app must be authorized for permissions, defined by the Android platform, in order to access certain capabilities of an Android device. An app developer specifies which permissions an app will require and these permissions must be authorized by the user of the device when the app is installed. Permissions, and the tools that are used to manage them, form the basis of the Android permission architecture, which is an essential part of the access control services provided by the Android platform. We have analyzed the evolution of the Android permission architecture across six versions of the Android platform, identifying various changes which have occurred during that period and a considerable amount of information about the permission architecture which is not included in the Android documentation. Using this information, we have identified a weakness in the way that the Android platform handles app permissions during platform upgrades. We explain how this weakness may be exploited by a developer to produce malicious software which the average user is unlikely to detect. We conclude with a discussion of potential mitigation techniques for this weakness, highlighting concerns drawn from other research in this area.
Starting Page	55
Ending Page	66
Page Count	12
File Format	PDF
ISBN	9781450324915
DOI	10.1145/2516760.2516774
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2013-11-08
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Authorization Privacy Permission architecture Permissions Malware Android
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in