Quire: lightweight provenance for smart phone operating systems

摘要: Smartphone apps are often granted to privilege run with access the network and sensitive local resources. This makes it difficult for remote endpoints place any trust in provenance of connections originating from a user's device. Even on phone, different distinct sets can communicate one another. allow app trick another into improperly exercising its privileges (resulting confused deputy attack). In Quire, we engineered two new security mechanisms Android address these issues. First, Quire tracks call chain on-device IPCs, allowing an choice operating reduced callers or full set by acting explicitly own behalf. Second, lightweight signature scheme allows create signed statement that be verified same phone. Both reflected RPCs. systems visibility state phone when RPC was made. We demonstrate usefulness example applications: advertising service runs advertisements separately their hosting applications, payment system. show Quire's performance overhead is minimal.