A Secure, Usable, and Transparent Middleware for Permission Managers on Android

摘要: Android’s permission system offers an all-or-nothing choice when installing app. To make it more flexible and fine-grained, users may choose a popular app tool, called manager , to selectively grant or revoke app’s permissions at runtime. A fundamental requirement for such is that the granted revoked should be enforced faithfully. However, we discover none of existing managers meet this due leaks in which unprivileged can exercise certain are not-granted through communicating with privileged app.To address problem, propose secure, usable, transparent OS-level middleware any defend against leaks. The provably secure sense effectively block all possible leaks.The designed have minimal impact on usability running apps. In addition, developers requires minor modifications Android OS. Finally, our evaluation shows incurs relatively low performance overhead power consumption.