A formal model to analyze the permission authorization and enforcement in the Android framework

Proceedings - SocialCom 2010: 2nd IEEE International Conference on Social Computing, PASSAT 2010: 2nd IEEE International Conference on Privacy, Security, Risk and Trust

Volumn , Issue , 2010, Pages 944-951

  Shin, Wook ^a   Kiyomoto, Shinsaku ^a   Fukushima, Kazuhide ^a   Tanaka, Toshiaki ^a  

^a KDDI R AND D LABORATORIES INC   (Japan)

Author keywords

Android; Formal model; Permission

Indexed keywords

ANDROID; APPLICATION COMPONENTS; BEHAVIOR SPECIFICATIONS; CURRENT SCHEMES; EMBEDDED PLATFORMS; FORMAL MODEL; PERMISSION; REFERENCE MODELS; SECURITY REQUIREMENTS; SECURITY VULNERABILITIES; STATE-BASED MODELS; THEOREM PROVERS;

ROBOTS; SPECIFICATIONS;

SECURITY OF DATA;

EID: 78649293466     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SocialCom.2010.140     Document Type: Conference Paper

References (7)

1. D. F. Ferraiolo, R. Sandhu, S. Gavrila, D. R. Kuhn, and R. Chandramouli, "Proposed NIST standard for role-based access control," ACM Trans. Inf. Syst. Secur., vol. 4, no. 3, pp. 224-274, 2001.
2. Google, Inc., "Security and permissions," http://code.google. com/android/devel/security.html (Retreived 2010-04-15).
3. W. Enck, M. Ongtang, and P. McDaniel, "On lightweight mobile phone application certification," in The 16th ACM conference on Computer and Communications Security, 2009, pp. 235-245.
4. A. Chaudhuri, "Language-based security on Android," in The 4th Workshop on Programming Languages and Analysis for Security, 2009, pp. 1-7.
5. B. Potter, D. Till, and J. Sinclair, An Introduction to Formal Specification and Z. Prentice Hall PTR, 1996.
6. S. Z. Béguelin, G. Betarte, and C. Luna, "A formal specification of the MIDP 2.0 security model," in The 4th International Workshop on Formal Aspects in Security and Trust. Springer, 2006, pp. 26-27.
7. W. Shin, S. Kwak, S. Kiyomoto, K. Fukushima, and T. Tanaka, "A small but non-negligible flaw in the Android permission scheme," in IEEE International Symposium on Policies for Distributed Systems and Network, 2010.