Instrumentation Based Dynamic Android Application Security Protection System

DOI

10.2991/wartia-17.2017.50How to use a DOI?

Keywords

Android security, Instrumentation, Permission usage behaviour, Fine-grained access control

Abstract

Nowadays, smart phones have converted the people's life style; convenience of the application has a big impact on all aspects of necessities. Considering that applications need to keep sensitive and private data, the trustworthiness of the application becomes a matter of concern to end users, and privacy protection is an urgent need. The current Android permission mechanism has the goal of fast, simple, and easy enforcement, so it designed to be a coarse-grained permission mechanism. In this paper, a fine-grained access control model for Android applications, which makes authorization decisions according to the permission usage behaviour and sensitive data accessed, is proposed. Furthermore, the fine-grained access control model is integrated into actual APPs through a so-called dynamic Android Application Security System (dAASS), which make use of instrumentation technology, static analysis and dynamic analysis technology. dAASS can enhance the security of Android system by fine-grained access control, permission usage tracking and security violation reminding. Performance experiment shows that deploying dAASS on Android applications takes less than 1 minute and secured applications exhibit no noticeable slowdown and Application Not Responding (ANR). dAASS can provide fine-grained real-time protection from malicious Android applications.

Copyright

© 2017, the Authors. Published by Atlantis Press.

Open Access

This is an open access article distributed under the CC BY-NC license (http://creativecommons.org/licenses/by-nc/4.0/).

Download article (PDF)

TY  - CONF
AU  - Ming Li
AU  - Zhikang Piao
AU  - Yong Wang
PY  - 2017/11
DA  - 2017/11
TI  - Instrumentation Based Dynamic Android Application Security Protection System
BT  - Proceedings of the 3rd Workshop on Advanced Research and Technology in Industry (WARTIA 2017)
PB  - Atlantis Press
SP  - 261
EP  - 272
SN  - 2352-5401
UR  - https://doi.org/10.2991/wartia-17.2017.50
DO  - 10.2991/wartia-17.2017.50
ID  - Li2017/11
ER  -