NDLI: Predicting Android application security and privacy risk with static code metrics

Please wait, while we are loading the content...

Future of mobile software for smartphones and drones: energy and performance

Cloud-guided QoS and energy management for mobile interactive web applications

Towards architectural styles for Android app software product lines

Code smells in iOS apps: how do they compare to Android?

ACCUSE: helping users to minimize Android app privacy concerns

CheckDroid: a tool for automated detection of bad practices in Android applications using taint analysis

Towards the quality improvement of cross-platform mobile applications

Using parsing agents as a service for data privacy

Leafactor: improving energy efficiency of Android apps via automatic refactoring

IFMLEdit.org: model driven rapid prototyping of mobile apps

M-perm: a lightweight detector for Android permission gaps

Towards native code offloading platforms for image processing in mobile applications: a case study

The soot-based toolchain for analyzing Android apps

Investigating decreasing energy usage in mobile apps via indistinguishable color changes

Rethinking the mobile code offloading paradigm: from concept to practice

Detecting Android smells using multi-objective genetic programming

Predicting Android application security and privacy risk with static code metrics

Authentication in selected mobile data collection systems: current state, challenges, solutions and gaps

Towards mobile twin peaks for app development

Just-in-time bug prediction in mobile applications: the domain matters!

Configuration service for mobile apps

P-lint: a permission smell detector for Android applications

Assessing the impact of service workers on the energy efficiency of progressive web apps

Generating predicate callback summaries for the Android framework

Mobile app development and management: results from a qualitative investigation

Who changed you?: obfuscator identification for Android

A framework for regression testing of outdoor mobile applications

A set of metrics for the effort estimation of mobile apps

Toward client-centric approaches for latency minimization in mobile applications

Authoring tool for location-based learning experiences

Performance-based guidelines for energy efficient mobile applications

Same app, different app stores: a comparative study

Who added that permission to my app?: an analysis of developer permission changes in open source Android apps

Dynamic encryption key security scheme (DEKSS) for mobile and cloud systems

CATE: concolic Android testing using Java pathfinder for Android applications

An approach to modeling call response behavior on mobile phones based on multi-dimensional contexts

Automatically locating malicious packages in piggybacked Android apps

On-device bug reporting for Android applications

Examining user complaints of wearable apps: a case study on Android wear

Roaming Nairobi roads: instrumenting roads under resource constraints

Predicting Android application security and privacy risk with static code metrics

Content Provider	ACM Digital Library
Author	Partho, Asif Pradhan, Priysha Rahman, Akond Williams, Laurie
Abstract	Android applications pose security and privacy risks for end-users. These risks are often quantified by performing dynamic analysis and permission analysis of the Android applications after release. Prediction of security and privacy risks associated with Android applications at early stages of application development, e.g. when the developer (s) are writing the code of the application, might help Android application developers in releasing applications to end-users that have less security and privacy risk. The goal of this paper is to aid Android application developers in assessing the security and privacy risk associated with Android applications by using static code metrics as predictors. In our paper, we consider security and privacy risk of Android application as how susceptible the application is to leaking private information of end-users and to releasing vulnerabilities. We investigate how effectively static code metrics that are extracted from the source code of Android applications, can be used to predict security and privacy risk of Android applications. We collected 21 static code metrics of 1,407 Android applications, and use the collected static code metrics to predict security and privacy risk of the applications. As the oracle of security and privacy risk, we used Androrisk, a tool that quantifies the amount of security and privacy risk of an Android application using analysis of Android permissions and dynamic analysis. To accomplish our goal, we used statistical learners such as, radial-based support vector machine (r-SVM). For r-SVM, we observe a precision of 0.83. Findings from our paper suggest that with proper selection of static code metrics, r-SVM can be used effectively to predict security and privacy risk of Android applications.
Starting Page	149
Ending Page	153
Page Count	5
File Format	PDF
ISBN	9781538626696
DOI	10.1109/MOBILESoft.2017.14
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2017-05-20
Access Restriction	Subscribed
Subject Keyword	Code metrics Prediction Android application Security and privacy risk
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Predicting vulnerable classes in an Android application

Security objectives, controls and metrics development for an Android smartphone application

Code Metrics For Predicting Risk Levels of Android Applications

Risk-driven security metrics development for an e-health IoT application

A framework for static detection of privacy leaks in android applications

A framework for static detection of privacy leaks in android applications (2012)

Android Security via Static Program Analysis

Android Malware Static Analysis Techniques

DroidJust: automated functionality-aware privacy leakage analysis for Android applications

Predicting Android application security and privacy risk with static code metrics

Similar Documents

Predicting vulnerable classes in an Android application

Security objectives, controls and metrics development for an Android smartphone application

Code Metrics For Predicting Risk Levels of Android Applications

Risk-driven security metrics development for an e-health IoT application

A framework for static detection of privacy leaks in android applications

A framework for static detection of privacy leaks in android applications (2012)

Android Security via Static Program Analysis

Android Malware Static Analysis Techniques

DroidJust: automated functionality-aware privacy leakage analysis for Android applications

Predicting Android application security and privacy risk with static code metrics