DyPolDroid: Protecting Users and Organizations from Permission-Abuse Attacks in Android

Carlos E. Rubio-Medrano, Matthew Hill, Luis M. Claramunt, Jaejong Baek, Gail Joon Ahn

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

Android applications are extremely popular, as they are widely used for banking, social media, e-commerce, etc. Such applications typically leverage a series of Permissions, which serve as a convenient abstraction for mediating access to security-sensitive functionality, e.g., sending data over the Internet, within the Android Ecosystem. However, several malicious applications have recently deployed attacks such as data leaks and spurious credit card charges by abusing the Permissions granted initially to them by unaware users in good faith. To alleviate this pressing concern, we present DyPolDroid, a dynamic and semi-automated security framework that builds upon Android Enterprise, a device-management framework for organizations, to allow for users and administrators to design and enforce so-called Counter-Policies, a convenient user-friendly abstraction to restrict the sets of Permissions granted to potential malicious applications, thus effectively protecting against serious attacks without requiring advanced security and technical expertise. Additionally, as a part of our experimental procedures, we introduce Laverna, a fully operational application that uses permissions to provide benign functionality at the same time it also abuses them for malicious purposes. To fully support the reproducibility of our results, and to encourage future work, the source code of both DyPolDroid and Laverna is publicly available as open-source.

Original languageEnglish (US)
Title of host publicationSecure Knowledge Management In The Artificial Intelligence Era - 9th International Conference, SKM 2021, Proceedings
EditorsRam Krishnan, H. Raghav Rao, Sanjay K. Sahay, Sagar Samtani, Ziming Zhao
PublisherSpringer Science and Business Media Deutschland GmbH
Pages23-36
Number of pages14
ISBN (Print)9783030975319
DOIs
StatePublished - 2022
Externally publishedYes
Event9th International Conference On Secure Knowledge Management In Artificial Intelligence Era, SKM 2021 - Virtual, Online
Duration: Oct 8 2021Oct 9 2021

Publication series

NameCommunications in Computer and Information Science
Volume1549 CCIS
ISSN (Print)1865-0929
ISSN (Electronic)1865-0937

Conference

Conference9th International Conference On Secure Knowledge Management In Artificial Intelligence Era, SKM 2021
CityVirtual, Online
Period10/8/2110/9/21

Keywords

  • Access control
  • Android Enterprise
  • Permission-abuse attacks

ASJC Scopus subject areas

  • Computer Science(all)
  • Mathematics(all)

Fingerprint

Dive into the research topics of 'DyPolDroid: Protecting Users and Organizations from Permission-Abuse Attacks in Android'. Together they form a unique fingerprint.

Cite this