PPT-AutoCog: Measuring the Description-to-permission Fidelity in Android Applications

Zhengyang Qu 1 Vaibhav Rastogi 1 Xinyi Zhang 12 Yan Chen 1 Tiantian Zhu 3 and Zhong Chen 4 1 1 Northwestern University IL US 2 Fudan University Shanghai China . Operating System. Presented: Hayder Abdulhameed. Android is a software stack for mobile devices that includes an operating system, middleware and key applications. . The android . provides the tools and APIs necessary to begin developing applications on the Android platform . CEG436: Mobile Computing. Prabhaker. . Mateti. Security Philosophy. Finite time and resources. Humans have difficulty understanding risk. Safer to assume that. Most developers do not understand security. and Refinement. Android Applications --- Example. . Example of location-sensitive social networking application for mobile phones in which users can discover their friends’ locations. . . Activities. Presented By-Nikhil Jain . Design of Secure OS. CS Department. Kent State University. . OUTLINE. 1. Introduction. 2. Android Story. 3. Android Architecture. 出處：. 2012 . IEEE 11th International Conference on Trust, Security and . Privacy. . in . Computing and Communications. 作者：. Andr’e. . Egners. , Ulrike . Meyer , . . Bjorn . Marschollek. Zhengyang Qu. 1. , . Vaibhav. Rastogi. 1. , . Xinyi. Zhang. 1,2. , Yan Chen. 1. , . Tiantian. Zhu. 3. , and . Zhong. Chen. 4. 1. 1. Northwestern University, IL, US, . 2. Fudan University, Shanghai, China, . Adrienne Porter . Felt, . Erika Chin, . Steve . Hanna, Dawn Song, David . Wagner. University of California. ACM . CCS . 2011. 2011/09/20. 1. Agenda. Introduction. Android Permission System. Permission Testing Methodology. Android Security. Presented By . Abhishek. Singh. Computer Science Department. Kent state University. . WILLIAM ENCK, MACHIGAR ONGTANG, . AND PATRICK MCDANIEL. Outline . Introduction. History. Android OS. Adrienne Porter . Felt, . Erika Chin, . Steve . Hanna, Dawn Song, David . Wagner. University of . California. 1. Outline. A brief Introduction of Android permission system. Detailed description of Android Permission System. Adrienne Porter . Felt, . Erika Chin, . Steve . Hanna, Dawn Song, David . Wagner. University of . California. 1. Outline. A brief Introduction of Android permission system. Detailed description of Android Permission System. Permission . Specification. Outline. Key questions. Android permission system. PScout design . and . implementation. Answer to key questions. Key Questions. Are there any redundant permissions?. Are undocumented APIs used?. Privacy #2. Prabhaker. . Mateti. TBD. Mix of slides from various sources. TBD Properly . merge. Mateti. Android Security. 2. Android Security Policy. Android focuses on Inter Component Communication (ICC). and Refinement. Android Applications --- Example. . Example of location-sensitive social networking application for mobile phones in which users can discover their friends’ locations. . . Activities. Lucky ONWUZURIKE. November 15, 2018. Motivation. 2. Why Apps?. They often handle and transmit sensitive information. Some have been shown to contain vulnerabilities (e.g., accepting invalid TLS certificate, permission abuse etc.).