Towards a multilayered permission‐based access control for extending Android security

Abstract

This paper discusses security issues on the user equipment, which is the "last mile" of social networks. One of the main Achilles' heel of social networks is not the organization of networks themselves, but the user devices, typically Android ones. The existing system of privileges makes it easy to infiltrate the network via applications installed on users' devices. Conventional signature-based and static analysis methods are vulnerable. Access to privacy-and security-relevant parts of the application programming interface is controlled by the corresponding permission in a manifest file. While requesting access to permissions, it may offer opportunities to malicious codes, which will cause security issues. Few works among permission analysis, however, pay attention to the prevention of permission leakage on both hardware and software frameworks. In this paper we tackle the challenge of providing our multilayered permission-based security extension scheme on Android platforms. We propose a usage and access control model and an effective method of preventing permission leakage based on ARM TrustZone security extension mechanism. In contrast to previous work, the proposed security architecture provides a permission-based mandatory access control on Android middleware, Linux kernel, and hardware layers. The evaluation results demonstrate the effectiveness of the proposed scheme in mitigating permission leakage vulnerabilities.

Fine-grained access control method for private data in android system

“…The author also proposed an efficient policy language that is specific to the middleware semantics of Android. Another security architecture that provides MAC is proposed by R Chang et al, 20 which is designed based on the ARM TrustZone security extension mechanism and provides permission-based MAC on Android middleware, Linux kernel and hardware layers. Samlley proposed the Security Enhanced Android (SEAndroid) 21 that also implemented the MAC model in Android.…”

Special issue on social network security and privacy

“…This special issue would not be complete without covering the security of mobile platforms and the technique of data forensics. Chang et al presented a multilayer permission‐based access control scheme for Android by using the ARM TrustZone security extension mechanism. In contrast to previous work, the proposed security architecture provides a permission‐based mandatory access control on Android middleware, Linux kernel, and hardware layers.…”

Big data security access control algorithm based on memory index acceleration in WSNs

“…The access control models can be divided into 5 categories: the discretionary access control (DAC) [5], the mandatory access control (MAC) [6], the role-based access control (RBAC) [7][8][9], the attribute-based access control (ABAC) [10], the policy-based access control (PBAC) [11,12]. Various data security algorithms are used to improve the security of the access control model.…”