Abstract:Recent years have experienced explosive growth of smartphone sales. Inevitably, the rise in the popularity of smartphones also makes them an attractive target for attacks. In light of these threats, current mobile platform providers have developed various server-side vetting processes to block malicious applications (“apps”). While helpful, they are still far from ideal in achieving their goals. To make matters worse, the presence of alternative (less-regulated) mobile marketplaces also opens up new attack vectors, which necessitate client-side solutions (e.g., mobile anti-virus software) to run on mobile devices. However, existing client-side solutions still exhibit limitations in their capability or deployability. In this paper, we present AirBag, a lightweight OS-level virtualization approach to enhance the popular Android platform and boost our defense capability against mobile malware infection. Assuming a trusted smartphone OS kernel and the fact that untrusted apps will be eventually installed onto users’ phones, AirBag is designed to isolate and prevent them from infecting our normal systems (e.g., corrupting the phone firmware) or stealthily leaking private information. More specifically, by dynamically creating an isolated runtime environment with its own dedicated namespace and virtualized system resources, AirBag not only allows for transparent execution of untrusted apps, but also effectively mediates their access to various system resources or phone functionalities (e.g., SMSs or phone calls). We have implemented a proof-of-concept prototype on three representative mobile devices, i.e., Google Nexus One, Nexus 7, and Samsung Galaxy S III. The evaluation results with a number of untrusted apps, including real-world mobile malware, demonstrate its practicality and effectiveness.

Android Security Reinforcement Technology

AirBag: Boosting Smartphone Resistance to Malware Infection.

Towards a multilayered permission-based access control for extending Android security.

ON ACCESS CONTROL ENHANCEMENT MECHANISM FOR SENSITIVE DATA AND CAPACITIES IN ANDROID

Uncovering Cross-Context Inconsistent Access Control Enforcement in Android.

Enhancement of Permission Management for an ARM-Android Platform.

Taming Information-Stealing Smartphone Applications (On Android)

Hybrid User-level Sandboxing of Third-party Android Apps.

An Adaptive Android Security Extension Against Privilege Escalation Attacks

AppShell: Making Data Protection Practical for Lost or Stolen Android Devices

An Adaptive and Configurable Protection Framework Against Android Privilege Escalation Threats

Android application fine-grained access control based on self-defined security policy

Achieving Resource-Centric Access Control for Web-App Interactions on Android

Application Policy Security Mechanisms of Android System.

Permission based Android security: Issues and countermeasures

Rethinking Permission Enforcement Mechanism on Mobile Systems.

Dr. Android and Mr. Hide: Fine-grained Security Policies on Unmodified Android

Context-Aware Usage Control for Android.

MRAAC: A Multi-Stage Risk-Aware Adaptive Authentication and Access Control Framework for Android

The Android Platform Security Model (2023)

Android Multi-Level System Permission Management Approach