Abstract:More and more powerful personal smart devices take users, especially the elder, into a disaster of policy administration where users are forced to set personal management policies in these devices. Considering a real case of this issue in the Android security, it is hard for users, even some programmers, to generally identify malicious permission requests when they install a third-party application. Motivated by the popularity of mutual assistance among friends (including family members) in the real world, we propose a novel framework for policy administration, referring to Socialized Policy Administration (SPA for short), to help users manage the policies in widely deployed personal devices. SPA leverages a basic idea that a user may invite his or her friends to help set the applications. Especially, when the size of invited friends increases, the setting result can be more resilient to a few malicious or unprofessional friends. We define the security properties of SPA, and propose an enforcement framework where users' friends can help users set applications without the leakage of friends' preferences with the supports of a privacy preserving mechanism. In our prototype, we only leverage partially homomorphic encryption cryptosystems to implement our framework, because the fully homomorphic encryption is not acceptable to be deployed in a practical service at the moment. Based on our prototype and performance evaluation, SPA is promising to support major types of policies in current popular applications with acceptable performance.

A Framework for Implementing Dynamically Modified Least Privilege Security Policy

A Dynamically Modified Privilege Control Policy

Enforcing the principle of least privilege with a state-based privilege control model

Handling Dynamic Information Release

Making Least Privilege The Low-Hanging Fruit In Clouds

Security Policy for Information Erasing and Leaking in Multithreaded Codes

Design and Implementation of SecPod, A Framework for Virtualization-Based Security Systems.

Hybrid Mandatory Model Composed of BLP and Clark-Wilson Policy

Implementing the principle of least administrative privilege on operating systems: challenges and perspectives

Policy-adaptive Capability Inheritance Algorithm Consistent with POSIX Standard

Practical Way to Implement Role-Based Access Control in Security Administration System

Research on Information Security Model and Security System Design

SPA: Inviting Your Friends to Help Set Android Apps.

An Authorization Architecture Oriented to Engineering and Scientific Computation in Grid Environments

A Policy Flexible Architecture for Secure Operating System.

Design and Implementation on a Policy-Flexible System

An Adaptive and Configurable Protection Framework Against Android Privilege Escalation Threats

Implementation and Automatic Testing for Security Enhancement of Linux Based on Least Privilege

An Adaptive Android Security Extension Against Privilege Escalation Attacks

An Access Control Frame Based on the Privilege of Program and It's Implementation in Linux

Secguard: Secure And Practical Integrity Protection Model For Operating Systems