Abstract:The Android system manages access to sensitive APIs by permission enforcement. An application (app) must declare proper permissions before invoking specific Android APIs. However, there is no official documentation providing the complete list of permission-protected APIs and the corresponding permissions to date. Researchers have spent significant efforts extracting such API protection mapping from the Android API framework, which leverages static code analysis to determine if specific permissions are required before accessing an API. Nevertheless, none of them has attempted to analyze the protection mapping in the native library (i.e., code written in C and C++), an essential component of the Android framework that handles communication with the lower-level hardware, such as cameras and sensors. While the protection mapping can be utilized to detect various security vulnerabilities in Android apps, such as permission over-privilege and component hijacking, imprecise mapping will lead to false results in detecting such security vulnerabilities. To fill this gap, we develop a prototype system, named NatiDroid, to facilitate the cross-language static analysis to benchmark against two state-of-the-art tools, termed Axplorer and Arcade. We evaluate NatiDroid on more than 11,000 Android apps, including system apps from custom Android ROMs and third-party apps from the Google Play. Our NatiDroid can identify up to 464 new API-permission mappings, in contrast to the worst-case results derived from both Axplorer and Arcade, where approximately 71% apps have at least one false positive in permission over-privilege and up to 3.6% apps have at least one false negative in component hijacking. Additionally, we identify that 24 components with at least one Native-triggered component hijacking vulnerability are misidentified by two benchmarks.

Revdroid

Automated Android Application Permission Recommendation

Vetting Undesirable Behaviors in Android Apps with Permission Use Analysis

Permission Use Analysis for Vetting Undesirable Behaviors in Android Apps

Systematic Detection of Capability Leaks in Stock Android Smartphones.

Detecting capability leaks in Android-based smartphones

RiskRanker: scalable and accurate zero-day android malware detection.

What Permissions Should This Android App Request?

Reevaluating Android Permission Gaps With Static And Dynamic Analysis

Aper: Evolution-Aware Runtime Permission Misuse Detection for Android Apps

Reviving Android Malware with DroidRide: and How Not To.

An Adaptive Android Security Extension Against Privilege Escalation Attacks

DroidAlarm: an all-sided static analysis tool for Android privilege-escalation malware.

Dr. Android and Mr. Hide: Fine-grained Security Policies on Unmodified Android

NatiDroid: Cross-Language Android Permission Specification

Privacy issues of android application permissions: A literature review

Analyzing Android Application in Real-Time at Kernel Level

Small Changes, Big Changes: An Updated View on the Android Permission System

Enhancement of Permission Management for an ARM-Android Platform.

You Are What the Permissions Told Me! Android Malware Detection Based on Hybrid Tactics

Component-based Permission Management of Android Applications