IDEAS home Printed from https://ideas.repec.org/a/igg/jeei00/v4y2013i1p16-27.html
   My bibliography  Save this article

Android Permission System Violation: Case Study and Refinement

Author

Listed:
  • Kyoung Soo Han

    (Department of Computer and Software, Hanyang University, Seoul, South Korea)

  • Yeoreum Lee

    (Department of Computer and Software, Hanyang University, Seoul, South Korea)

  • Biao Jiang

    (Microsoft (China), Co., Ltd., Shanghai, China)

  • Eul Gyu Im

    (Division of Computer Science and Engineering, Hanyang University, Seoul, South Korea)

Abstract

Android uses permissions for application security management. Android also allows inter-application communication (IAC), which enables cooperation between different applications to perform complex tasks by using some components and Intents. In other words, Android provides more flexibility and places less restriction on application development. This is a major feature that differentiates Android from its competitors. However, IAC also facilitates malicious applications that can collude in attacks of privilege escalation. In this paper, the authors demonstrate with case studies that all IAC channels can potentially be utilized for privilege escalation attacks, and the authors propose a refinement to solve this problem by enforcing IAC permissions and exposing IAC to users.

Suggested Citation

  • Kyoung Soo Han & Yeoreum Lee & Biao Jiang & Eul Gyu Im, 2013. "Android Permission System Violation: Case Study and Refinement," International Journal of E-Entrepreneurship and Innovation (IJEEI), IGI Global, vol. 4(1), pages 16-27, January.
    • Handle: RePEc:igg:jeei00:v:4:y:2013:i:1:p:16-27
    as

    Download full text from publisher

    File URL: http://services.igi-global.com/resolvedoi/resolve.aspx?doi=10.4018/jeei.2013010102
    Download Restriction: no
    ---><---

    More about this item

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:igg:jeei00:v:4:y:2013:i:1:p:16-27. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    We have no bibliographic references for this item. You can help adding them by using this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Journal Editor (email available below). General contact details of provider: https://www.igi-global.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.