Reference : Automatically Securing Permission-Based Software by Reducing the Attack Surface: An A...

	Document type :	Scientific congresses, symposiums and conference proceedings : Paper published in a book
	Discipline(s) :	Engineering, computing & technology : Computer science
	To cite this reference:	http://hdl.handle.net/10993/3890

Title :	Automatically Securing Permission-Based Software by Reducing the Attack Surface: An Application to Android
Language :	English
Author, co-author :	Bartel, Alexandre [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
	Klein, Jacques [University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC) >]
	Monperrus, Martin [University of Lille, France]
	Le Traon, Yves [University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC) >]
Publication date :	2012
Main document title :	IEEE/ACM International Conference on Automated Software Engineering
Pages :	1-4
Peer reviewed :	Yes
ISBN :	978-1-4503-1204-2
Event name :	IEEE/ACM International Conference on Automated Software Engineering
Event date :	September 2012
Event place (city) :	Essen
Event country :	Germany
Keywords :	[en] Permissions ; permission-based software ; call-graph ; Android ; security ; Soot ; static analysis
Abstract :	[en] In the permission-based security model (used e.g. in An- droid and Blackberry), applications can be granted more permissions than they actually need, what we call a permission gap?. Malware can leverage the unused permissions for achieving their malicious goals, for instance using code injection. In this paper, we present an approach to detecting permission gaps using static analysis. Using our tool on a dataset of Android applications, we found out that a non negligible part of applications suffers from permission gaps, i.e. does not use all the permissions they declare.
Permalink :	http://hdl.handle.net/10993/3890
Commentary :	IEEE/ACM International Conference on Automated Software Engineering

	File(s) associated to this reference
	Fulltext file(s): File Commentary Version Size Access Open access ase2012-androidMap.pdf No commentary Author postprint 180.66 kB View/Open

All documents in ORBi^lu are protected by a user license.

 

University of Luxembourg Library |  Feedback |  Legal notices Site Map