作者: Xiaolei Li , Xinshu Dong , Zhenkai Liang
DOI: 10.1007/978-3-319-13841-1_14
关键词: Private information retrieval 、 Internal logic 、 Android (operating system) 、 Static analysis 、 World Wide Web 、 Permission 、 Computer science
摘要: Android applies a permission-based model to regulate applications (apps). When users grant apps permissions access their sensitive data, they cannot control how the utilize data. Existing taint-based techniques only detect presence of exfiltration flow for but much data are leaked. Users need more intuitive measures inform them which going leak private information. In this paper, we take an alternative approach identifying apps’ internal logic about We define such as sequence operations on named usage pattern. build static analysis tool automatically extract patterns from apps. Our evaluation shows that our effectively and efficiently identifies key thus ranks according different patterns.