Practical and lightweight domain isolation on Android

Bugiel, Sven; Davi, Lucas; Dmitrienko, Alexandra; Heuser, Stephan; Sadeghi, Ahmad-Reza; Shastry, Bhargava

doi:10.1145/2046614.2046624

Cited by 139 publications

(91 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…More specifically, a developer, who wants to publish apps on Google Play has to buy a developer account, at the price of 25$. In exchange, the developer receives a private key, which she can use to digitally sign her apps [20]. If users report an app as malicious, then this app is removed both from the market and remotely from all the devices that have installed it.…”

Section: Criteria and Their Association With The Application Labelsmentioning

confidence: 99%

Risk analysis of Android applications: A user-centric solution

Dini

Martinelli

Matteucci

et al. 2018

Future Generation Computer Systems

View full text Add to dashboard Cite

Android applications (apps) pose many risks to their users, e.g., by including code that may threaten user privacy or system integrity. Most of the current security countermeasures for detecting dangerous apps show some weaknesses, mainly related to users' understanding and acceptance. Hence, users would benefit from an effective but simple technique that indicates whether an app is safe or risky to be installed. In this paper, we present MAETROID (Multi-criteria App Evaluator of TRust for AndrOID), a framework to evaluate the trustworthiness of Android apps, i.e., the amount of risk they pose to users, e.g., in terms of confidentiality and integrity. MAETROID performs a multi-criteria analysis of an app at deploy-time and returns a single easyto-understand evaluation of the app's risk level (i.e., Trusted, Medium Risk, and High Risk), aimed at driving the user decision on whether or not installing a new app. The criteria include the set of requested permissions and a set of metadata retrieved from the marketplace, denoting the app quality and popularity. We have tested MAETROID on a set of 11,000 apps both coming from Google Play and from a database of known malicious apps. The results show a good accuracy in both identifying the malicious apps and in terms of false positive rate.

show abstract

Section: Criteria and Their Association With The Application Labelsmentioning

confidence: 99%

Risk analysis of Android applications: A user-centric solution

Dini

Martinelli

Matteucci

et al. 2018

Future Generation Computer Systems

View full text Add to dashboard Cite

show abstract

“…5 In addition, researchers also explore user-level solutions to provide separate mobile runtime environments. For example, TrustDroid [22] enhances the Android framework to provide domain-level isolation that confines the unauthorized data access and cross-domain communications. Recent Android release (Jellybean 4.2) extends the Android framework to add multi-user support.…”

Section: Client-side Protectionmentioning

confidence: 99%

AirBag: Boosting Smartphone Resistance to Malware Infection

Wu¹,

Zhou²,

Patel³

et al. 2014

Proceedings 2014 Network and Distributed System Security Symposium

View full text Add to dashboard Cite

Abstract-Recent years have experienced explosive growth of smartphone sales. Inevitably, the rise in the popularity of smartphones also makes them an attractive target for attacks. In light of these threats, current mobile platform providers have developed various server-side vetting processes to block malicious applications ("apps"). While helpful, they are still far from ideal in achieving their goals. To make matters worse, the presence of alternative (less-regulated) mobile marketplaces also opens up new attack vectors, which necessitate client-side solutions (e.g., mobile anti-virus software) to run on mobile devices. However, existing client-side solutions still exhibit limitations in their capability or deployability.In this paper, we present AirBag, a lightweight OS-level virtualization approach to enhance the popular Android platform and boost our defense capability against mobile malware infection. Assuming a trusted smartphone OS kernel and the fact that untrusted apps will be eventually installed onto users' phones, AirBag is designed to isolate and prevent them from infecting our normal systems (e.g., corrupting the phone firmware) or stealthily leaking private information. More specifically, by dynamically creating an isolated runtime environment with its own dedicated namespace and virtualized system resources, AirBag not only allows for transparent execution of untrusted apps, but also effectively mediates their access to various system resources or phone functionalities (e.g., SMSs or phone calls). We have implemented a proof-of-concept prototype on three representative mobile devices, i.e., Google Nexus One, Nexus 7, and Samsung Galaxy S III. The evaluation results with a number of untrusted apps, including real-world mobile malware, demonstrate its practicality and effectiveness.

show abstract

“…[8] developed TrustDroid, a software framework that targets the business world and secures mobile devices in each layer of the Android architecture. At the kernel level, it has a Kernel MAC (Mandatory Access Control) manager that controls the inter-process communication and administrates the file system; at the middle layer, a Policy Manager and a Firewall Manager are used; and at the top layer, a customized Package Manager is used.…”

Section: A1 Operating System Based Solutionsmentioning

confidence: 99%

A Comprehensive Analysis of Android Security and Proposed Solutions

Yüksel¹,

Zaim²,

Aydın³

2014

IJCNIS

View full text Add to dashboard Cite

Abstract-The increasing popularity of smart devices have led users to complete all of their daily work with these devices. Users are now able to shop online, share information with the applications that they install on their smart devices. Installed applications gain access to various sensitive information, such as the user's contact list, phone number, location. However, there is no control mechanism in place that can check whether these applications are safe to install. Therefore, applications are installed according to the users' decisions, without any limitations or warnings. As a result, users become the target of malicious applications, and the personal security and privacy are compromised. In this study, we investigate the security solutions that aim to protect the privacy and security of Android users. We reveal the shortcomings of mobile security solutions and shed light on the research community. Additionally, we present the taxonomy of Android-based mobile security solutions.

show abstract

Practical and lightweight domain isolation on Android

Cited by 139 publications

References 22 publications

Risk analysis of Android applications: A user-centric solution

Risk analysis of Android applications: A user-centric solution

AirBag: Boosting Smartphone Resistance to Malware Infection

A Comprehensive Analysis of Android Security and Proposed Solutions

Contact Info

Product

Resources

About