TU Darmstadt / ULB / TUbiblio

The Transitivity-of-Trust Problem in Android Application Interaction

Bartsch, Steffen and Berger, Bernhard and Bunke, Michaela and Sohr, Karsten
Pernul, Günther and Sandhu, Ravi (eds.) :

The Transitivity-of-Trust Problem in Android Application Interaction.
8th International Conference on Availability, Reliability and Security (ARES 2013) IEEE
[Conference or Workshop Item] , (2013)

Abstract

Mobile phones have developed into complex platforms with large numbers of installed applications and a wide range of sensitive data. Application security policies limit the permissions of each installed application. As applications may interact, restricting single applications may create a false sense of security for end users, while data may still leave the mobile phone through other applications. Instead, the information flow needs to be policed for the composite system of applications in a transparent manner. In this paper, we propose to employ static analysis, based on the software architecture and focused on data-flow analysis, to detect information flows between components. Specifically, we aim to reveal transitivity-of-trust problems in multi-component mobile platforms. We demonstrate the feasibility of our approach with two Android applications.

Item Type: Conference or Workshop Item
Erschienen: 2013
Editors: Pernul, Günther and Sandhu, Ravi
Creators: Bartsch, Steffen and Berger, Bernhard and Bunke, Michaela and Sohr, Karsten
Title: The Transitivity-of-Trust Problem in Android Application Interaction
Language: English
Abstract:

Mobile phones have developed into complex platforms with large numbers of installed applications and a wide range of sensitive data. Application security policies limit the permissions of each installed application. As applications may interact, restricting single applications may create a false sense of security for end users, while data may still leave the mobile phone through other applications. Instead, the information flow needs to be policed for the composite system of applications in a transparent manner. In this paper, we propose to employ static analysis, based on the software architecture and focused on data-flow analysis, to detect information flows between components. Specifically, we aim to reveal transitivity-of-trust problems in multi-component mobile platforms. We demonstrate the feasibility of our approach with two Android applications.

Title of Book: 8th International Conference on Availability, Reliability and Security (ARES 2013)
Publisher: IEEE
Uncontrolled Keywords: Security, Usability and Society;Secure Data
Divisions: LOEWE > LOEWE-Zentren > CASED – Center for Advanced Security Research Darmstadt
Department of Computer Science > SECUSO - Security, Usability and Society
Department of Computer Science > Theoretical Computer Science - Cryptography and Computer Algebra
Profile Areas > Cybersecurity (CYSEC)
LOEWE > LOEWE-Zentren
Department of Computer Science
Profile Areas
LOEWE
Event Location: University of Surrey, Guildford, UK
Date Deposited: 28 Jul 2016 18:35
Identification Number: TUD-CS-2013-0122
Related URLs:
Export:

Optionen (nur für Redakteure)

View Item View Item