A proposal for the privacy leakage verification tool for android application developers

Proceedings of the 7th International Conference on Ubiquitous Information Management and Communication, ICUIMC 2013

Volumn , Issue , 2013, Pages

  Matsumoto, Shinichi ^a   Sakurai, Kouichi ^b  

^a Fukuoka Industry Academia Symphonicity   (Japan)

^b KYUSHU UNIVERSITY   (Japan)

Author keywords

Android; Covert channel; Information flow; Smartphone; Software testing; Static analysis

Indexed keywords

ANDROID; ANDROID APPLICATIONS; APPLICATION BINARIES; APPLICATION DEVELOPERS; COVERT CHANNELS; INFORMATION FLOWS; SMART-PHONE APPLICATIONS; THIRD PARTY APPLICATION (APPS);

COMMERCE; COMMUNICATION; INFORMATION MANAGEMENT; ROBOTS; SIGNAL ENCODING; SOFTWARE TESTING; STATIC ANALYSIS;

SMARTPHONES;

EID: 84875840141     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2448556.2448610     Document Type: Conference Paper

References (22)

1. Aho, A.V., Sethi, R. and Ullman, J.D., Compilers: Principles, Techniques, and Tools, Prentice Hall, New Jersey, 2006.
2. Appel, A.W. and Palsberg, J., Modern Compiler Implementation in Java, Cambridge University Press, 2002.
3. Asher, A., Skype-Skype Security blog- [Fixed] Privacy vulnerability in Skype for Android, 2011, http://blogs.skype.com/security/2011/04/ privacyvulnerabilityinskype.html.
4. Bugiel, S., Davi, L., Dmitrienko, A., Fischer, T., Sadeghi, A. and Shastry, B., Towards Taming Privilege-Escalation Attacks on Android, in 19th Annual Network & Distributed System Security Symposium, (San Diego, CA, USA, 2012).
5. Chaudhuri, A., Language-Based Security on Android, in ACM SIGPLAN Fourth Workshop on Programming Languages and Analysis for Security, (Dublin, Ireland, 2009). 1-7. DOI=http://dx.doi.org/10.1145/1554339.1554341.
6. Enck, W., Ongtang, M. and McDaniel, P., Understanding Android Security, IEEE Security and Privacy, Volume 7(1) . 50-54.
7. Enck, W., Gilbert, P., Chun, B, Cox, L.P., Jung, J., McDaniel, P. and Sheth, A.N., TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones, in Proceedings of the USENIX Symposium on Operating Systems Design and Implementation, (Vancouver, BC, Canada, 2010).
8. Felt, A., Chin, E., Hanna, S., Song, D. and Wagner, D., Android permissions demystified, in 18th ACM Conference on Computer and Communications Security (Chicago, IL, USA, 2011). 627-638. DOI=http://dx.doi.org/10.1145/ 2046707.2046779.
9. Gosling, J., Joy, B., Steele, G. and Bracha, G., The Java Language Specification (Third Edition). Addison-Wesley, Boston, 2005.
10. Hiroshi L., Android and Security, 2012, http://googlemobile.blogspot.jp/ 2012/02/androidand-security.html.
11. Hornyack, P., Han, S., Jung, J., Schechtery, S. and Wetherall, D., These aren't the droids you're looking for: retrofitting android to protect data from imperious applications, in 18th ACM Conference on Computer and Communications Security, (Chicago, IL, USA, 2011). 639-652. DOI=http://dx.doi.org/10.1145/ 2046707.2046780.
12. Jing, Y., Ahn, G. and Hu, H., Model-Based Conformance Testing for Android, in Advances in Information and Computer Security, 7th International Workshop on Security, IWSEC (Fukuoka, JAPAN, 2012). Springer, 1-18.
13. Marforio, C., Aurélien, F. and Capkun, S. 2011. Application collusion attack on the permission-based security model and its implications for modern smartphone systems, Technical Report. Eidgenössische Technische Hochschule Zürich. DOI=http://dx.doi.org/10.3929/ethz-a-006720730.
14. Oberheide, J., Dissecting, Android's Bouncer, 2012, https://blog. duosecurity.com/2012/06/dissectingandroids-bouncer/.
15. Schlegel, R., Zhang, K., Zhou, X., Intwala, M., Kapadia, A. and Wang, X. 2011. Soundcomber: A Stealthy and Context-Aware Sound Trojan for Smartphones, in 18th Annual Network and Distributed System Security Symposium, (San Diego, CA, USA, 2011).
16. Android SDK - Android Developers, http://developer.android.com/sdk/index. html.
17. Android Security Overview, http://source.android.com/tech/security/index. html.
18. Eclipse Java development tools(JDT), 2012, http://www.eclipse.org/jdt/.
19. Google Play, https://play.google.com/store.
20. Manifest.permission - Android Developers, 2012, http://developer.android. com/reference/android/Manifest.permission.html.
21. Package Index - Android Developers, 2012, http://developer.android.com/ reference/packages.html.
22. (permission) Android developers, 2012, http://developer.android.com/ guide/topics/manifest/permission-element.html.