作者: Zhi Xu , Sencun Zhu
关键词: Android (operating system) 、 Enforcement 、 Private information retrieval 、 Computer security 、 Third party 、 Computer science 、 Access control 、 Usability 、 Android security 、 Attack surface
摘要: While mobile sensing applications are booming, the sensor management mechanisms in current smartphone operating systems left behind -- they incomprehensive and coarse-grained, exposing a huge attack surface for malicious or aggressive third party apps to steal user's private information through sensors.In this paper, we propose privacy-aware framework, called SemaDroid, which extends existing framework on Android provide comprehensive fine-grained access control over onboard sensors. SemaDroid allows user monitor usage of installed apps, disclosure while not affecting app's usability. Furthermore, supports context-aware quality-of-sensing based policies. The enforcement update policies real-time. Detailed design implementation presented show that works compatible with security framework. Demonstrations also given capability defeating emerging sensor-based attacks. Finally, high efficiency SemaDroid.