PERMITME: Integrating android permissioning support in the IDE

ETX 2014 - Proceedings of the 2014 ACM SIGPLAN Workshop on Eclipse Technology eXchange, Part of SPLASH 2014

Volumn , Issue , 2014, Pages 15-20

  Bello Ogunu, Emmanuel ^a   Shehab, Mohammed ^a  

^a UNIVERSITY OF NORTH CAROLINA AT CHARLOTTE   (United States)

Author keywords

Android; Least privilege; Permissions; Software development

Indexed keywords

ACCESS CONTROL; INTEGRODIFFERENTIAL EQUATIONS; MOBILE COMPUTING; SOFTWARE DESIGN; SOFTWARE ENGINEERING;

ACCESS CONTROL MECHANISM; ANDROID; ANDROID APPLICATIONS; LEAST PRIVILEGE; MOBILE APPLICATIONS; PERMISSIONS; SENSITIVE INFORMATIONS; USER INFORMATION;

ANDROID (OPERATING SYSTEM);

EID: 84922833241     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2688130.2688135     Document Type: Conference Paper

References (17)

1. A. Acquisti and J. Grossklags. Privacy and rationality in individual decision making. Security & Privacy, IEEE, 3(1):26-33, 2005.
2. K. W. Y. Au, Y. F. Zhou, Z. Huang, and D. Lie. Pscout: analyzing the android permission specification. In Proceedings of the 2012 ACM conference on Computer and communications security, pages 217-228. ACM, 2012.
3. N. Ayewah, W. Pugh, J. D. Morgenthaler, J. Penix, and Y. Zhou. Evaluating static analysis defect warnings on production software. In Proceedings of the 7th ACM SIGPLANSIGSOFT workshop on Program analysis for software tools and engineering, pages 1-8. ACM, 2007.
4. O. Consortium. ASM: a bytecode engineering library. http: //asm.ow2.org/index.html, 12 Oct 2013.
5. L. F. Cranor. Security and usability: Designing secure systems that people can use. O'reilly, 2007.
6. A. Developers. Android developers: Permissions. http://developer.android.com/guide/topics/ security/permissions.html.
7. A. P. Felt, E. Chin, S. Hanna, D. Song, and D. Wagner. Android permissions demystified. In Proceedings of the 18th ACM conference on Computer and communications security, pages 627-638. ACM, 2011.
8. D. Hovemeyer and W. Pugh. Finding bugs is easy. ACM Sigplan Notices, 39(12):92-106, 2004.
9. D. Hovemeyer and W. Pugh. Finding more null pointer bugs, but not too many. In Proceedings of the 7th ACM SIGPLANSIGSOFT workshop on Program analysis for software tools and engineering, pages 9-14. ACM, 2007.
10. N. Sadeh, L. F. Cranor, and P. G. Kelley. Privacy as part of the app decision-making process, 2013.
11. J. H. Saltzer and M. D. Schroeder. The protection of information in computer systems. Proceedings of the IEEE, 63(9):1278-1308, 1975.
12. R. Stevens, J. Ganz, V. Filkov, P. Devanbu, and H. Chen. Asking for (and about) permissions used by android apps. In Proceedings of the Tenth International Workshop on Mining Software Repositories, pages 31-40. IEEE Press, 2013.
13. T. Vidas, N. Christin, and L. Cranor. Curbing android permission creep. In Proceedings of the Web, volume 2, 2011.
14. L. Vogel. Eclipse JDT - Abstract Syntax Tree (AST) and the Java Model. http://www.vogella.com/tutorials/ EclipseJDT/article.html, 08 Aug 2012.
15. X. Wei, L. Gomez, I. Neamtiu, and M. Faloutsos. Permission evolution in the android ecosystem. In Proceedings of the 28th Annual Computer Security Applications Conference, pages 31-40. ACM, 2012.
16. J. Xie, B. Chu, H. R. Lipford, and J. T. Melton. Aside: Ide support for web application security. In Proceedings of the 27th Annual Computer Security Applications Conference, pages 267-276. ACM, 2011.
17. J. Zhu, H. R. Lipford, and B. Chu. Interactive support for secure programming education. In Proceeding of the 44th ACM technical symposium on Computer science education, pages 687-692. ACM, 2013.