Abstract:This paper discusses security issues on the user equipment, which is the last mile of social networks. One of the main Achilles' heel of social networks is not the organization of networks themselves, but the user devices, typically Android ones. The existing system of privileges makes it easy to infiltrate the network via applications installed on users' devices. Conventional signature-based and static analysis methods are vulnerable. Access to privacy- and security-relevant parts of the application programming interface is controlled by the corresponding permission in a manifest file. While requesting access to permissions, it may offer opportunities to malicious codes, which will cause security issues. Few works among permission analysis, however, pay attention to the prevention of permission leakage on both hardware and software frameworks. In this paper we tackle the challenge of providing our multilayered permission-based security extension scheme on Android platforms. We propose a usage and access control model and an effective method of preventing permission leakage based on ARM TrustZone security extension mechanism. In contrast to previous work, the proposed security architecture provides a permission-based mandatory access control on Android middleware, Linux kernel, and hardware layers. The evaluation results demonstrate the effectiveness of the proposed scheme in mitigating permission leakage vulnerabilities.

Research on Access Control Method Based on Dynamic Trust Degree in Mobile Internet Environment

A Task-Role Based Access Control Model with Multi-Constraints

Dynamic Role-based Access Control for Web Services Using Context and Trust

Kind of user behaviour trust and role based dynamic access control model

A cloud-user behavior assessment based dynamic access control model

An RBAC Model Based on Trust Degree in Open Environment

Trust-Risk-Game Based Access Control in Cross Domain Application

A Trust-Role Based Context Aware Access Control Model

A trustworthiness- and context-based access control model for open systems

Trust Based Access Control in Infrastructure-Centric Environment

Access Control in New Network Environment

Research on Trust-Role Access Control Model in Cloud Computing

The Design and Simulation of a New Dynamic Credit and Role Based Access Control Strategy.

Control in New Network Environment

A Mobile Access Control Architecture For Multiple Security Domains Environment

Research on Trust-Authorization-Based Access Control Model for Web Services

Towards a multilayered permission-based access control for extending Android security.

A Database Security Access Control Method Based on Identity Authentication

Dynamic Access Control Model Based on FAHP in Cloud Environment

Access Control Model Based on Trust-role

Roaming Mechanism of Network User Between Peer Entities Based on Trust Degree