Abstract:Modern smartphone apps tend to contain and use vast amounts of data that can be broadly classified as structured and unstructured. Structured data, such as an user's geolocation, has predefined semantics that can be retrieved by well-defined platform APIs. Unstructured data, on the other hand, relies on the context of the apps to reflect its meaning and value, and is typically provided by the user directly into an app's interface. Recent research has shown that third-party apps are leaking highly-sensitive unstructured data, including user's banking credentials. Unfortunately, none of the current solutions focus on the protection of unstructured data. In this paper, we propose an owner-centric solution to protect unstructured data on smartphones. Our approach allows the data owners to specify security policies when providing their untrusted data to third-party apps. It tracks the flow of information to enforce the owner's policies at strategic exit points. Based on this approach, we design and implement a system, called <Literal>DataChest</Literal>. We develop several mechanisms to reduce user burden and keep interruption to the minimum, while at the same time preventing the malicious apps from tricking the user. We evaluate our system against a set of real-world malicious apps and a series of synthetic attacks to show that it can successfully prevent the leakage of unstructured data while incurring reasonable performance overhead.

Research on User Privacy Data Protection Mechanism Under Android System

AppShell: Making Data Protection Practical for Lost or Stolen Android Devices

Owner-Centric Protection of Unstructured Data on Smartphones.

Phoneprotector: Protecting User Privacy On The Android-Based Mobile Platform

Taming Information-Stealing Smartphone Applications (On Android)

Phones' Private Data Protection and Synchronization Based on Android OS

Toward Active and Efficient Privacy Protection for Android

ASCDS: a Smartphone Confidential Data Storage Scheme

ON ACCESS CONTROL ENHANCEMENT MECHANISM FOR SENSITIVE DATA AND CAPACITIES IN ANDROID

A Private-Data Protection Mechanism for Trusted Mobile Platform

Android Distributed Cloud Storage System based on Shamir Threshold

An Android Application Software Security Protection Method Based on Hybrid Reinforcement

Research on Android Transparent Encryption File System Based on Xposed

Multi-cloud storage system based on Android platform

Sensitive Data Protection on Mobile Devices

Android platform-based individual privacy information protection system

Internet Data Security Based on Android Mobile Clients

Phones' Theft-Prevention Technology Based on Android OS

A High Efficiency Encryption Scheme of Dual Data Partitions for Android Devices.

CenterYou: A cloud-based Approach to Simplify Android Privacy Management

A Survey of Privacy Protection Techniques for Mobile Devices