A framework for static detection of privacy leaks in android applications

Proceedings of the ACM Symposium on Applied Computing

Volumn , Issue , 2012, Pages 1457-1462

  Mann, Christopher ^a   Starostin, Artem ^a  

^a DARMSTADT UNIVERSITY OF TECHNOLOGY   (Germany)

Author keywords

android; information flow security; privacy; static analysis

Indexed keywords

ANDROID; BYTECODES; INFORMATION FLOW SECURITY; PRIVACY POLICIES; PRIVATE DATA; SECURITY TYPE SYSTEMS; STATIC INFORMATION;

DATA PRIVACY; SECURITY OF DATA; STATIC ANALYSIS;

ROBOTS;

EID: 84863587187     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2245276.2232009     Document Type: Conference Paper

References (18)

1. A. Askarov and A. Sabelfeld. Security-Typed Languages for Implementation of Cryptographic Protocols: A Case Study. In Proc. of 10th ESORICS, pages 197-221. Springer, 2005.
2. G. Barthe, D. Pichardie, and T. Rezk. A Certified Lightweight Non-interference Java Bytecode Verifier. In Proc. of 16th ESOP, pages 125-140. Springer, 2007.
3. D. E. Denning and P. J. Denning. Certification of Programs for Secure Information Flow. Commun. of the ACM, 20(7):504-513, 1977.
4. W. Enck. Defending Users Against Smartphone Apps: Techniques and Future Directions. In Proc. of 7th ICISS. Springer, 2011.
5. W. Enck et al. TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones. In Proc. of 9th OSDI, pages 393-407. USENIX, 2010.
6. S. Genaim and F. Spoto. Information Flow Analysis for Java Bytecode. In Proc. of 6th VMCAI, pages 346-362. Springer, 2005.
7. Google Inc. The Android Developer's Guide. http://developer.android.com/ guide/, 2011.
8. M. Hamblen. Symbian, Android Will Be Top Smartphone OSes in '12, Gartner Reiterates. http://www.computerworld.com/s/article/ 9139301/Symbian-Android- will-be-top- smartphone-0Ses-in-12-Gartner-reiterates, 2009.
9. J. Ligatti, L. Bauer, and D. Walker. Edit Automata: Enforcement Mechanisms for Run-time Security Policies. Int. J. of Inf. Sec., 4(1):2-16, 2005.
10. C. Mann. A Static Framework for Privacy Analysis of Android Applications. Bachelor's thesis, TU Darmstadt, 2011.
11. R. Medel, A. B. Compagnoni, and E. Bonelli. A Typed Assembly Language for Non-interference. In Proc. of 9th ICTCS, pages 360-374. Springer, 2005.
12. J. C. Mitchell. Handbook of Theoretical Computer Science, chapter Type Systems for Programming Languages, pages 365-458. MIT Press, 1990.
13. F. B. Schneider. Enforceable Security Policies. ACM Trans. on Inf. Sys. Sec., 3(1):30{50, 2000.
14. The Android Open Source Project. Bytecode for the Dalvik VM. http://source.android.com/tech/ dalvik/dalvik-bytecode.html, 2007.
15. The Wall Street Journal Blogs. What They Know - Mobile. http://blogs.wsj.com/wtk-mobile/, 2010.
16. S. Thurm and Y. I. Kane. Your Apps Are Watching You. Available at http://online.wsj.com/, 2010.
17. D. Volpano, G. Smith, and C. Irvine. A Sound Type System for Secure Flow Analysis. J. of Comp. Sec., 4(3):1-21, 1996.
18. A. Yeager. Researchers Find Phone Apps Sending Data without Notification. http://www.physorg.com/news204978481.html, 2010.