NDLI: revDroid: Code Analysis of the Side Effects after Dynamic Permission Revocation of Android Apps

Please wait, while we are loading the content...

Statistical Detection of Online Drifting Twitter Spam: Invited Paper

ORIGEN: Automatic Extraction of Offset-Revealing Instructions for Cross-Version Memory Analysis

Enabling Ciphertext Deduplication for Secure Cloud Storage and Access Control

FSSR: Fine-Grained EHRs Sharing via Similarity-Based Recommendation in Cloud-Assisted eHealthcare System

R-Droid: Leveraging Android App Analysis with Static Slice Optimization

Credential Wrapping: From Anonymous Password Authentication to Anonymous Biometric Authentication

Recipient Revocable Identity-Based Broadcast Encryption: How to Revoke Some Recipients in IBBE without Knowledge of the Plaintext

SecHOG: Privacy-Preserving Outsourcing Computation of Histogram of Oriented Gradients in the Cloud

NFPS: Adding Undetectable Secure Deletion to Flash Translation Layer

Mystique: Evolving Android Malware for Auditing Anti-Malware Tools

Vehicle Self-Surveillance: Sensor-Enabled Automatic Driver Recognition

Binary Analysis for Autonomous Hacking: Invited Abstract

The Request for Better Measurement: A Comparative Evaluation of Two-Factor Authentication Schemes

Secure Dynamic SSE via Access Indistinguishable Storage

Efficient Authenticated Multi-Pattern Matching

Model-based Security Testing: An Empirical Study on OAuth 2.0 Implementations

CDRep: Automatic Repair of Cryptographic Misuses in Android Applications

MAXS: Scaling Malware Execution with Sequential Multi-Hypothesis Testing

Privacy and Utility of Inference Control Mechanisms for Social Computing Applications

Generic Construction of Publicly Verifiable Predicate Encryption

Juggling the Gadgets: Binary-level Code Randomization using Instruction Displacement

Privacy-Preserving Spectral Analysis of Large Graphs in Public Clouds

Publicly Verifiable Secure Cloud Storage for Dynamic Data Using Secure Network Coding

UC-secure Two-Server Password-Based Authentication Protocol and Its Applications

Dealerless Corporate Key Generation for Identity-Based Encryption Schemes

Practical and Efficient Attribute-Based Encryption with Constant-Size Ciphertexts in Outsourced Verifiable Computation

Preventing Page Faults from Telling Your Secrets

StormDroid: A Streaminglized Machine Learning-Based System for Detecting Android Malware

Automated Dynamic Firmware Analysis at Scale: A Case Study on Embedded Web Interfaces

Homomorphic Linear Authentication Schemes from (ε)-Authentication Codes

Building an Encrypted, Distributed, and Searchable Key-value Store

Efficient Verifiable Computation of Linear and Quadratic Functions over Encrypted Data

Discovering Malicious Domains through Passive DNS Data Graph Analysis

MobiPot: Understanding Mobile Telephony Threats with Honeycards

Real-Time Detection of Malware Downloads via Large-Scale URL->File->Machine Graph Mining

Privacy Preserving Disease Treatment & Complication Prediction System (PDTCPS)

Novel Constructions of Cramer-Shoup Like Cryptosystems Based on Index Exchangeable Family

No-Execute-After-Read: Preventing Code Disclosure in Commodity Software

Efficient Multi-Function Data Sharing and Searching Mechanism for Cloud-Based Encrypted Data

Efficient Techniques for Publicly Verifiable Delegation of Computation

Client-CASH: Protecting Master Passwords against Offline Attacks

Anonymous Identity-Based Broadcast Encryption with Constant Decryption Complexity and Strong Security

Efficient Secure Outsourcing of Large-scale Quadratic Programs

Identifying and Utilizing Dependencies Across Cloud Security Services

FLEX: A Flexible Code Authentication Framework for Delegating Mobile App Customization

Distributed Detection of Single-Stage Multipoint Cyber Attacks in a Water Treatment Plant

Forgery-Resistant Touch-based Authentication on Mobile Devices

Anonymous Role-Based Access Control on E-Health Records

Efficient Privacy-Preserving Matrix Factorization via Fully Homomorphic Encryption: Extended Abstract

Half-Baked Cookies: Hardening Cookie-Based Authentication for the Modern Web

Checking Intent-based Communication in Android with Intent Space Analysis

Smartwatch-Based Keystroke Inference Attacks and Context-Aware Protection Mechanisms

Data Exfiltration in the Face of CSP

Efficient Construction of Completely Non-Malleable CCA Secure Public Key Encryption

ROPMEMU: A Framework for the Analysis of Complex Code-Reuse Attacks

Device-Enhanced Password Protocols with Optimal Online-Offline Protection

Password-Controlled Encryption with Accountable Break-Glass Access

Verifiable Outsourcing Algorithms for Modular Exponentiations with Improved Checkability

Hardening OpenStack Cloud Platforms against Compute Node Compromises

DroidDisintegrator: Intra-Application Information Flow Control in Android Apps

Smart Locks: Lessons for Securing Commodity Internet of Things Devices

Practical "Signatures with Efficient Protocols" from Simple Assumptions

Gait-Based Wi-Fi Signatures for Privacy-Preserving

Privacy Breach by Exploiting postMessage in HTML5: Identification, Evaluation, and Countermeasure

Attestation Transparency: Building secure Internet services for legacy clients

revDroid: Code Analysis of the Side Effects after Dynamic Permission Revocation of Android Apps

Leakage Fingerprints: A Non-negligible Vulnerability in Side-Channel Analysis

StemJail: Dynamic Role Compartmentalization

(Deterministic) Hierarchical Identity-based Encryption from Learning with Rounding over Small Modulus

Friend or Foe?: Your Wearable Devices Reveal Your Personal PIN

Anonymous Identity-Based Broadcast Encryption with Chosen-Ciphertext Security

Cross Processor Cache Attacks

Why MAC Address Randomization is not Enough: An Analysis of Wi-Fi Network Discovery Mechanisms

Bilateral-secure Signature by Key Evolving

Anonymous Identification for Ad Hoc Group

Fault Attacks on Efficient Pairing Implementations

CICADAS: Congesting the Internet with Coordinated and Decentralized Pulsating Attacks

Attacks and Defence on Android Free Floating Windows

Error Tolerance based Single Interesting Point Side Channel CPA Distinguisher

SkypeLine: Robust Hidden Data Transmission for VoIP

Generally Hybrid Proxy Re-Encryption: A Secure Data Sharing among Cryptographic Clouds

RamCrypt: Kernel-based Address Space Encryption for User-mode Processes

Your Credentials Are Compromised, Do Not Panic: You Can Be Well Protected

Inside Attack Filtering for Robust Sensor Localization

revDroid: Code Analysis of the Side Effects after Dynamic Permission Revocation of Android Apps

Content Provider	ACM Digital Library
Author	Guo, Zeqing Qian, Zhiyun Han, Weili Li, Dong Wang, Xiaoyang Sean Chen, Hao Guo, Danhao Fang, Zheran
Abstract	Dynamic revocation of permissions of installed Android applications has been gaining popularity, because of the increasing concern of security and privacy in the Android platform. However, applications often crash or misbehave when their permissions are revoked, rendering applications completely unusable. Even though Google has officially introduced the new permission mechanism in Android 6.0 to explicitly support dynamic permission revocation, the issue still exists. In this paper, we conduct an empirical study to understand the latest application practice post Android 6.0. Specifically, we design a practical tool, referred to as revDroid, to help us to empirically analyze how often the undesirable side effects, especially application crash, can occur in off-the-shelf Android applications. From the analysis of 248 popular applications from Google Play Store, revDroid finds out that 70% applications and 46% permission-relevant calls do not appropriately catch exceptions caused by permission revocation, while third-party libraries pay much more attention to permission revocation. We also use revDroid to analyze 132 recent malware samples. The result shows that only 27% malwares and 36% permission-relevant API calls of malwares fail to consider the permission revocation. In fact, many of them perform specialized handling of permission revocation to keep the core malicious logic running. Finally, revDroid can be used to help developers uncover the unhandled permission revocations during development time and greatly improve the application quality.
Starting Page	747
Ending Page	758
Page Count	12
File Format	PDF
ISBN	9781450342339
DOI	10.1145/2897845.2897914
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2016-05-30
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Android security Revdroid Permission revocation Permission over-claim
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in