PUREDroid: Permission Usage and Risk Estimation for Android Applications

摘要: Android applications pose many security risks that affect the and privacy of their users. Adversaries construct different types' types malicious use social engineering approaches to attract users download trust these applications. Malicious usually request permissions are not related main functionality in order access sensitive information or resources. Most attempt grant requested without understanding potential harm those how can be misused disclose privacy. Therefore, there is a need for risk assessment model which intimate about level by an application assist make right decision whether deny permission. This paper proposes Permission Usage Risk Estimation (PUREDroid) measure applications' magnitude resulting from granting extraneous requests. In evaluation with more than 25000 applications, including 5773 malware 19242 benign we demonstrate usefulness effectiveness our proposed scoring method.