AndroidLeaks: Automatically detecting potential privacy leaks in Android applications on a large scale

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 7344 LNCS, Issue , 2012, Pages 291-307

  Gibler, Clint ^a   Crussell, Jonathan ^a,b   Erickson, Jeremy ^a,b   Chen, Hao ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b SANDIA NATIONAL LABORATORIES   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

GPS LOCATION; MOBILE APPLICATIONS; PERSONAL INFORMATION; PRIVATE DATA; SECURITY MODEL; SENSITIVE DATAS; SENSITIVE INFORMATIONS;

INFORMATION DISSEMINATION; MOBILE DEVICES; STATIC ANALYSIS;

ROBOTS;

EID: 84863084209     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-30921-2_17     Document Type: Conference Paper

References (21)

1. Android developer reference, http://d.android.com/ (accessed March 30, 2012)
2. Android security and permissions, http://d.android.com/guide/topics/ security/security.html (accessed March 30, 2012)
3. Bitblaze, http://bitblaze.cs.berkeley.edu/
4. Go Apk. Go apk market, http://market.goapk.com (accessed March 2011)
5. AppBrain. Number of available android applications, http://www.appbrain. com/stats/number-of-android-apps (accessed August 15, 2011)
6. Bornstein, D.: Dalvik vm internals (2008), http://goo.gl/knN9n (accessed March 18, 2011)
7. IBM T.J. Watson Research Center. T.j. watson libraries for analysis (wala) (March 2011) (accessed March 30, 2012)
8. The Nielsen Company. Who is winning the u.s. smartphone battle?, http://blog.nielsen.com/nielsenwire/online mobile/who-is-winning-the-u-s- smartphone-battle (accessed March 17, 2011)
9. Egele, M., Kruegel, C., Kirda, E., Vigna, G.: Pios: Detecting privacy leaks in ios applications. In: Proceedings of the Network and Distributed System Security Symposium (2011)
10. Enck, W., Gilbert, P., Chun, B.G., Cox, L.P., Jung, J., McDaniel, P., Sheth, A.N.: Taintdroid: an information-flow tracking system for realtime privacy monitoring on smartphones. In: Proceedings of the 9th USENIX Conference on Operating Systems Design and Implementation, pp. 1-6. USENIX Association (2010)
11. Enck, W., Octeau, D., McDaniel, P., Chaudhuri, S.: A study of android application security. In: Proc. of the 20th USENIX Security Symposium (2011)
12. Felt, A.P., Chin, E., Hanna, S., Song, D., Wagner, D.: Android permissions demystified. In: Proceedings of the 18th ACM Conference on Computer and Communications Security, pp. 627-638. ACM (2011)
13. Fuchs, A.P., Chaudhuri, A., Foster, J.S.: Scandroid: Automated security certification of android applications. Univ. of Maryland (2009) (manuscript), http://www.cs.umd.edu/~avik/projects/scandroidascaa
14. Google. Google play , http://market.android.com (accessed March, 2011)
15. Apple Inc. App store review guidelines, http://developer.apple.com/ appstore/guidelines.html (accessed March 30, 2012)
16. Pachal, P.: Google removes 21 malware apps from android market (March 2011), http://www.pcmag.com/article2/0,2817,2381252,00.asp (accessed March 18, 2011)
17. pxb1988. dex2jar: A tool for converting android's .dex format to java's .class format, https://code.google.com/p/dex2jar/ (accessed March 30, 2012)
18. SlideMe. Slideme: Android community and application marketplace, http://slideme.org/ (accessed March 30, 2012)
19. Tripp, O., Pistoia, M., Fink, S.J., Sridharan, M., Weisman, O.: Taj: effective taint analysis of web applications. In: ACM Sigplan Notices, vol. 44, pp. 87-97. ACM (2009)
20. Yin, S.: 'most sophisticated' android trojan surfaces in china (December 2010), http://www.pcmag.com/article2/0,2817,2374926,00.asp (accessed March 18, 2011)
21. Zhou, Y., Zhang, X., Jiang, X., Freeh, V.W.: Taming Information-Stealing Smartphone Applications (on Android). In: McCune, J.M., Balacheff, B., Perrig, A., Sadeghi, A.-R., Sasse, A., Beres, Y. (eds.) Trust 2011. LNCS, vol. 6740, pp. 93-107. Springer, Heidelberg (2011)