arrow
返回

A root privilege management scheme with revocable authorization for Android devices

delete2018-04-01
delete60
PRE
AI
Y
Yu‐an Tan
L
Liang Chen
J
Jun Zheng
张全新 封面图
张全新 (Quanxin Zhang)
J
Jiamin Zheng
李元章 封面图
李元章 (Yuanzhang Li) *
DOI:10.1016/j.jnca.2018.01.011delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
As a critical part in mobile cloud computing, the vulnerability of Android devices can directly affect the security of the mobile cloud. The unsecured Android can be potentially exploited by malwares to obtain the root privilege. Root privilege misuse is the critical issue for Android security, which breaks the integrity of Android security and rises the risk of permission escalation from malwares. The existing solutions still fail to balance the trade-off between the users desires on using root privilege and the Android security, which lays risks in leading to the root privilege misuse. To address this issue, a root privilege management scheme named Root Privilege Manager (RPM) is proposed, which adopts the root privilege access control to guarantee the exclusive root access opportunity of the authenticated apps. RPM verifies the authorization and integrity of root requesting apps based on the extracted authorization files during app installation, and then root access management controls the granting of root privilege based on the authenticated results. In this way, the end users are free from the embarrassment of appropriate decision-making while confront root access management. The prototype of RPM is implemented to evaluate its effectiveness, efficiency and performance. The experiments show RPM can effectively control the granting of root privilege and the time consumption in root access management is increased by 0.21%-0.94% respectively compared with the user management.
Keyword:
Mobile cloud computing
Android security
Root privilege management
Revocable authorization
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

Journal of Network and Computer Applications 封面图
Journal of Network and Computer Applications
IF:
8
论文数:
3.7K
被引数:
1.1W

机构

B
beijing institute of technology
学者数:
5.5W
论文数: 4.0W
被引数: 63
引用论文

引用论文

A Hybrid Cloud Approach for Secure Authorized Deduplication
err2015-05-01
err255
PREAI
errLi, Jin; Li, Yan Kit; Chen, Xiaofeng; Lee, Patrick P. C.; Lou, Wenjing
err分享
err收藏
Cross-cluster asymmetric group key agreement for wireless sensor networks
err2018-02-10
err27
PREAI
errZheng, Jiamin; Tan, Yu-An; Zhang, Qikun; Zhang, Xiaosong; Zhu, Liehuang; Zhang, Quanxin
err分享
err收藏
A data integrity verification scheme in mobile cloud computing
err2017-01-01
err34
PREAI
errLin, Chen; Shen, Zhidong; Chen, Qian; Sheldon, Frederick T.
err分享
err收藏
学者 查看更多内容