Sleeping Android: The danger of dormant permissions

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2013, Pages 55-66

  Sellwood, James ^a   Crampton, Jason ^a  

^a UNIVERSITY OF LONDON   (United Kingdom)

Author keywords

android; authorization; malware; permission architecture; permissions; privacy

Indexed keywords

ACCESS CONTROL SERVICES; AMOUNT OF INFORMATION; ANDROID; AUTHORIZATION; MALICIOUS SOFTWARE; MALWARES; MITIGATION TECHNIQUES; PERMISSIONS;

COMPUTER CRIME; DATA PRIVACY; MOBILE DEVICES; SMARTPHONES;

ROBOTS;

EID: 84889009319     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2516760.2516774     Document Type: Conference Paper

References (26)

1. ANDROID. API Differences between 13 and 14. http://developer.android.com/ sdk/api-diff/14/changes.html. [online] Accessed On: 2013-05-19.
2. ANDROID. API Differences between 14 and 15. http://developer.android.com/ sdk/api-diff/15/changes.html. [online] Accessed On: 2013-05-19.
3. ANDROID. API Differences between 15 and 16. http://developer.android.com/ sdk/api-diff/16/changes.html. [online] Accessed On: 2013-05-19.
4. ANDROID. API Differences between 16 and 17. http://developer.android.com/ sdk/api-diff/17/changes.html. [online] Accessed On: 2013-06-20.
5. ANDROID. Manifest.permission | Android Developers. http://developer. android.com/reference/android/Manifest.permission.html. [online] Accessed On: 2013-08-22.
6. ANDROID. Platforms | Android Developers. http://developer.android.com/ tools/revisions/platforms.html. [online] Accessed On: 2013-05-19.
7. ANDROID. R.attr | Android Developers. http://developer.android.com/ reference/android/R.attr.html#protectionLevel. [online] Accessed On: 2013-05-19.
8. ANDROID. Security Tips (IPC) | Android Developers. http://developer. android.com/training/articles/security-tips.html#IPC. [online] Accessed On: 2013-06-13.
9. ANDROID. Status Notifications | Android Developers. http://developer. android.com/guide/topics/ui/notifiers/notifications.html. [online] Accessed On: 2013-05-19.
10. AU, K. W. Y., ZHOU, Y. F., HUANG, Z., GILL, P., AND LIE, D. Short Paper: A Look at SmartPhone Permission Models. In Proceedings of the First ACM Workshop on Security and Privacy in Smartphones and Mobile Devices (2011), SPSM'11, ACM.
11. AU, K. W. Y., ZHOU, Y. F., HUANG, Z., AND LIE, D. PScout: Analyzing the Android Permission Specification. In Proceedings of the 19th ACM Conference on Computer and Communications Security (2012), CCS'12, ACM.
12. BARRERA, D., VAN OORSCHOT, P., KAYACIK, H., AND SOMAYAJI, A. A Methodology for Empirical Analysis of Permission-Based Security Models and its Application to Android. In Proceedings of the Seventeenth ACM Conference on Computer and Communications Security (2010), CCS'10, ACM.
13. BENENSON, Z., HINTZ, N., KROLL-PETERS, O., AND KRUPP, M. Poster: Attitudes to IT-Security When Using a Smartphone. In Eighth Symposium on Usable Privacy and Security (SOUPS) (2012), SOUPS'12.
14. BISHOP, M., AND DILGER, M. Checking for race conditions in file accesses. Computing systems 2, 2 (1996), 131-152.
15. CENTRAL, A. Late-Night Poll: Do You Read App Permissions Before Installing? http://www.androidcentral.com/late-night-poll-do-you-read-app- permissions-installing. [online] Accessed On: 2013-05-19.
16. CHIA, P. H., YAMAMOTO, Y., AND ASOKAN, N. Is this App Safe? A Large Scale Study on Application Permissions and Risk Signals. In Proceedings of the Twenty-First International World Wide Web Conference (2012), WWW'12, ACM.
17. EGELMAN, S., PORTER FELT, A., AND WAGNER, D. Choice Architecture and Smartphone Privacy: There's A Price for That. In Proceedings of the 11th Annual Workshop on the Economics of Information Security (2012), WEIS'12.
18. GOOGLE. weather - Google Play. https://play.google.com/store/search?q= weather&c=apps. [online] Accessed On: 2013-05-19.
19. KELLEY, P. G., CONSOLVO, S., CRANOR, L. F., JUNG, J., SADEH, N., AND WETHERALL, D. A Conundrum of Permissions: Installing Applications on an Android Smartphone. In Proceedings of the Workshop on Usable Security (2012), USEC'12.
20. PORTER FELT, A., CHIN, E., HANNA, S., SONG, D., AND WAGNER, D. Android Permissions Demystified. In Proceedings of the Eighteenth ACM Conference on Computer and Communications Security (2011), CCS'11, ACM.
21. PORTER FELT, A., EGELMAN, S., FINIFTER, M., AKHAWE, D., AND WAGNER, D. How to Ask for Permission. In Proceedings of USENIX Workshop on Hot Topics in Security (HotSec) 2012 (2012).
22. PORTER FELT, A., EGELMAN, S., AND WAGNER, D. I've Got 99 Problems, But Vibration Ain't One: A Survery of Smartphone Users' Concerns. Tech. rep., University of California, Berkeley, 2012.
23. PORTER FELT, A., HA, E., EGELMAN, S., HANEY, A., CHIN, E., AND WAGNER, D. Android Permissions: User Attention, Comprehension, and Behavior. In Eighth Symposium on Usable Privacy and Security (SOUPS) (2012), SOUPS'12.
24. SELLWOOD, J. Sleeping Android: Exploit Through Dormant Permission Requests. Tech. Rep. RHUL-MA-2013-6, Royal Holloway, University of London, 2013. Available from http://www.ma.rhul.ac.uk/static/techrep/2013/MA-2013-06.pdf.
25. SHIN, W., KWAK, S., KIYOMOTO, S., FUKUSHIMA, K., AND TANAKA, T. A Small but Non-negligible Flaw in the Android Permission Scheme. In Proceedings of the 2010 IEEE International Symposium on Policies for Distributed Systems and Networks (2010), POLICY'10, IEEE.
26. VIDAS, T., CHRISTIN, N., AND CRANOR, L. F. Curbing Android Permission Creep. In Proceedings of the Web 2.0 Security and Privacy 2011 (2011), W2SP'11.