.png){kind=icon}
返回
RTPDroid: Detecting Implicitly Malicious Behaviors Under Runtime Permission Model
.png){kind=icon}
OA
AI
DOI：10.1109/TR.2021.3078628.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
In Android 6.0 and above, the install-time permission model is replaced with the runtime permission model (RPM), where permission requesting is performed at runtime, rather than at install time, to protect users' privacy. The RPM brings certain benefits to security, but still has drawbacks that are exploitable by malware. The permission could be attained under a reasonable context and then be freely used under another context for executing malicious behavior without notifying users. In addition, the RPM may cause bugs when developers forget to add permission checking before using it. Motivated by this, we propose RTPDroid, an approach to detect implicitly malicious behaviors and bugs brought by the RPM. To do so, implicitly malicious behaviors and bugs are defined formally. Then, notions of user-aware contexts as well as user-aware call graphs are defined and utilized for the detection. Experiments on 221 real-world apps reveal 131 bugs and 174 implicitly malicious behaviors under the RPM.
Keyword:
Computer bugs
Runtime
Security
Tools
Internet
Erbium
Privacy
Android
implicitly malicious behaviors (IMBs)
malware
privacy
runtime permission model (RPM)
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
5.7
论文数:
2.8K
被引数:
8.5K
机构
引用论文
Evaluation of Growth Regulator Inhibitors for Controlling Postbloom Fruit Drop (PFD) of Citrus Induced by the Fungus Colletotrichum acutatum.png)
HortScience
OAAI
HortScienceIF0
OAAI分享收藏Physicochemical Characteristics of the Birnessite and Todorokite Synthesized Using Various MethodsMineralsOAAI
MineralsIF0
OAAI分享收藏分享收藏分享收藏分享收藏
查看更多内容