Dimitriadis, A., Efraimidis, P.S. and Katos, V., 2016. Malevolent app pairs: An android permission overpassing scheme. In: ACM International Conference on Computing Frontiers 2016, 16-18 May 2016, Como, Italy, 431 - 436.
Full text available as:
PDF (© ACM, 2016. This is the author's version of the work. It is posted here by permission of ACM for your personal use. Not for redistribution)
p431-dimitriadis.pdf - Accepted Version
Available under License Creative Commons Attribution Non-commercial No Derivatives.
© 2016 Copyright held by the owner/author(s).Portable smart devices potentially store a wealth of information of personal data, making them attractive targets for data exfiltration attacks. Permission based schemes are core security controls for reducing privacy and security risks. In this paper we demonstrate that current permission schemes cannot effectively mitigate risks posed by covert channels. We show that a pair of apps with different permission settings may collude in order to effectively create a state where a union of their permissions is obtained, giving opportunities for leaking sensitive data, whilst keeping the leak potentially unnoticed. We then propose a solution for such attacks.
|Item Type:||Conference or Workshop Item (Paper)|
|Additional Information:||© ACM, 2016. This is the author's version of the work. It is posted here by permission of ACM for your personal use. Not for redistribution. The definitive version was published in 2016 ACM International Conference on Computing Frontiers, Proceedings p 431-436|
|Uncontrolled Keywords:||Android smartphones, privacy, data exltration, malevolent applications, covert channel|
|Group:||Faculty of Science & Technology|
|Deposited By:||Unnamed user with email symplectic@symplectic|
|Deposited On:||08 Aug 2016 14:20|
|Last Modified:||08 Aug 2016 14:42|
Downloads per month over past year
|Repository Staff Only -|