A SECURITY ASSESSMENT METHOD FOR ANDROID APPLICATIONS BASED ON PERMISSION MODEL

摘要：

　　Permission-based security model of Android restricts applications to access specific resources,but malicious applications can invade more easily in such user-centric pattern.Through the analysis of the Android Permission-based security model and the permission features of Android applications,we establish the permission model to quantify the functional characteristics of the application,and then provide an assessment method in which we use the network visualization techniques and clustering algorithm to determine whether the testing application is potentially malicious application or not so as to help users choose applications before installation.We test the assessment method on 873 applications available online and do the statistic and analysis of the results to find that this method can do efforts in finding potentially malicious applications.

关键词： Android permission security malicious application permission model visualization technology

作者: Danyang Jiang Xiangling Fu Maoqiang Song Yidong Cui

作者单位: School of Software Engineering,Beijing University of Posts and Telecommunications,Beijing 100876,China

会议类型: 国际会议

会议名称: 2012 2nd IEEE International Conference on Cloud Computing and Intelligence Systems (2012年第2届IEEE云计算与智能系统国际会议(IEEE CCIS2012))

会议地点: 杭州

会议语种:英文

页码: 925-929

在线出版日期: 2012-10-30（万方平台首次上网日期，不代表论文的发表时间）