Context Awareness through Reasoning on Private Analysis for Android Application

2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing Pub Date : 2015-11-03 DOI:10.1109/CSCloud.2015.63

Hongmu Han, Ruixuan Li, Jinwei Hu, Meikang Qiu

{"title":"Context Awareness through Reasoning on Private Analysis for Android Application","authors":"Hongmu Han, Ruixuan Li, Jinwei Hu, Meikang Qiu","doi":"10.1109/CSCloud.2015.63","DOIUrl":null,"url":null,"abstract":"Smartphone contains diverse sensitive private information, such as phone number, contact and credit. The Android platform employs permission mechanism to protect intensive information from illegal leakage. There are several tools to assist users to manage apps' permissions, such as App Ops, Privacy Guard, and XPrivacy. However, the permission mechanism of Android is complicated, and only a few of smartphone users are familiar with Android security mechanism. In addition, it is difficult for smartphone users to know whether the privacy information exposure by Android applications is legal or not. Reverse engineering and program data flow analysis are basic approaches to analysis applications. Although it needs analysts to manual analysis results, its efficiency is largely depends on analysts' skills and experience. To improve analysis efficiency, we take a case-based reasoning method to simulation the security expert analysis applications. We translate the result of Android static analysis tools into cases and build a case reasoning library. Experiments show that it can help analysts to aid analysis Android applications.","PeriodicalId":278090,"journal":{"name":"2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing","volume":"7 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2015-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"5","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/CSCloud.2015.63","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 5

Abstract

Smartphone contains diverse sensitive private information, such as phone number, contact and credit. The Android platform employs permission mechanism to protect intensive information from illegal leakage. There are several tools to assist users to manage apps' permissions, such as App Ops, Privacy Guard, and XPrivacy. However, the permission mechanism of Android is complicated, and only a few of smartphone users are familiar with Android security mechanism. In addition, it is difficult for smartphone users to know whether the privacy information exposure by Android applications is legal or not. Reverse engineering and program data flow analysis are basic approaches to analysis applications. Although it needs analysts to manual analysis results, its efficiency is largely depends on analysts' skills and experience. To improve analysis efficiency, we take a case-based reasoning method to simulation the security expert analysis applications. We translate the result of Android static analysis tools into cases and build a case reasoning library. Experiments show that it can help analysts to aid analysis Android applications.

查看原文本刊更多论文

基于推理的Android应用程序私有分析的上下文感知

智能手机中包含电话号码、联系方式、信用卡等多种敏感的个人信息。Android平台采用权限机制，保护密集信息不被非法泄露。有几个工具可以帮助用户管理应用程序的权限，如App Ops、Privacy Guard和XPrivacy。然而，Android的权限机制复杂，只有少数智能手机用户熟悉Android的安全机制。此外，智能手机用户很难知道Android应用程序泄露隐私信息是否合法。逆向工程和程序数据流分析是分析应用程序的基本方法。虽然它需要分析人员手工分析结果，但其效率在很大程度上取决于分析人员的技能和经验。为了提高分析效率，我们采用基于案例的推理方法来模拟安全专家分析应用。将Android静态分析工具的结果转化为案例，构建案例推理库。实验表明，它可以帮助分析人员辅助分析Android应用程序。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

2015 IEEE 2nd International Conference on Cyber Security and Cloud Computing

自引率

0.00%

发文量