A Formal Specification of Access Control in Android with URI Permissions

Talegaon, Samir; Krishnan, Ram

doi:10.1007/s10796-020-10066-9

Cited by 5 publications

(1 citation statement)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…However, it should be observed that Alloy can only prove that formulas are satisfiable, whereas {log} can prove both, satisfiability and unsatisfiability. There are more works using formal methods to study a specific aspect of Android which not necessarily conduct formal verification [48,49,50]. These approaches require a high amount of human effort, not only for identifying flaws but also to prove any desired property.…”

Section: Discussion and Related Workmentioning

confidence: 99%

An Automatically Verified Prototype of the Android Permissions System

2023

View full text Add to dashboard Cite

In a previous work De Luca and Luna presented formal specifications of idealized formulations of the permission model of Android in the Coq proof assistant. This formal development is about 23 KLOC of Coq code, including proofs. This work aims at showing that {log} ('setlog')-a satisfiability solver and a constraint logic programming language-can be used as an effective automated prover for the class of proofs that must be discharged in the formal verification of systems such as the one carried out by De Luca and Luna. We show how the Coq model is encoded in {log} and how automated proofs are performed. The resulting {log} model is an automatically verified executable prototype of the Android permissions system. Detailed data on the empirical evaluation resulting after executing all the proofs in {log} is provided. The integration of Coq and {log} as to provide a framework featuring automated proof and prototype generation is discussed.

show abstract

Section: Discussion and Related Workmentioning

confidence: 99%

An Automatically Verified Prototype of the Android Permissions System

2023

View full text Add to dashboard Cite

show abstract

A comprehensive framework for inter-app ICC security analysis of Android apps

Nirumand,

Zamani,

Ladani

2024

Autom Softw Eng

View full text Add to dashboard Cite

Advances in Secure Knowledge Management in the Artificial Intelligence Era

et al. 2021

View full text Add to dashboard Cite

Knowledge management and preservation started thousands of years ago from cave paintings, representing words by pictures, later moving to books through the invention of paper and printing in the 15 th century (Wallace, 2007). Later with the development of computing systems, knowledge/information was stored in the form of computing documents. In the first decade of the 21 st century there was an explosion of volume, velocity, and variety (3V) of data. In addition to the storage cost, extraction of information/knowledge was non-trivial and thus required the evolution of knowledge management tools. In the 2 nd

show abstract

A Formal Specification of Access Control in Android with URI Permissions

Cited by 5 publications

References 21 publications

An Automatically Verified Prototype of the Android Permissions System

An Automatically Verified Prototype of the Android Permissions System

A comprehensive framework for inter-app ICC security analysis of Android apps

Advances in Secure Knowledge Management in the Artificial Intelligence Era

Contact Info

Product

Resources

About