Android Multi-Level System Permission Management Approach

Yang Luo,Qixun Zhang,Qingni Shen,Hongzhi Liu,Zhonghai Wu

DOI: https://doi.org/10.48550/arXiv.1712.02217

2017-12-06

Abstract:With the expansion of the market share occupied by the Android platform, security issues (especially application security) have become attention focus of researchers. In fact, the existing methods lack the capabilities to manage application permissions without root privilege. This study proposes a dynamic management mechanism of Android application permissions based on security policies. The paper first describes the permissions by security policies, then implementes permission checking code and request evaluation algorithm in Android framework layer. Experimental results indicate that the presented approach succeeds in permission management of Android applications, and its system overhead is low, which makes it an effective method for Android permission management.

Cryptography and Security

What problem does this paper attempt to address?

The main problem that this paper attempts to solve is the security problem of the Android platform, which specifically includes the following aspects:

1. **Underlying security issues**: Some root tools have already achieved root privilege escalation on the latest version of Android, which provides an opportunity for malware to abuse privileges. In particular, illegal root operations are likely to damage the existing security system of the system, causing the system to face greater security risks.

2. **Upper - layer application security issues**: Currently, there is a lack of an effective method to manage the permissions of Android applications, resulting in permission chaos and lack of management in applications. Due to the negligence of developers or malicious intentions, some applications will apply for many permissions that are not related to themselves, threatening the security of the system and user data.

In order to solve the above problems, the paper proposes a multi - level Android system permission control method, specifically including:

- **Underlying Linux user permission model**: A Linux user permission model for MLS (Multi - Level Security) is proposed, and a conversion algorithm from the Linux user permission relationship tree to the MLS security level definition is given. By constructing the Linux user permission relationship tree, the permission inclusion relationship between different users is ensured, and the MLS mechanism is used for security enhancement.

- **Upper - layer application dynamic permission management mechanism**: An Android application permission dynamic management mechanism based on security policies is designed. A permission checkpoint is set at the Android framework layer, and a request evaluation algorithm is called for authorization evaluation, thereby achieving effective monitoring of application behavior and permission management.

The experimental results show that this method can effectively manage the normal invocation of Android application permissions, restrict illegal invocations, and has a small system overhead and will not significantly affect the user experience.