DR BACA: dynamic role based access control for Android

摘要: Android as an open platform dominates the booming mobile market. However its permission mechanism is inflexible and often results in over-privileged applications. This turn creates severe security issues. Aiming to support Principle of Least Privilege, we propose implement a Dynamic Role Based Access Control for (DR BACA) model enhance security, particularly corporate environment. Our system offers multi-user management on devices comparable traditional workstations, provides fine-grained (RBAC) at both application level. Moreover, by leveraging context-aware capabilities Near Field communication (NFC) technology, our solution supports dynamic RBAC provide more flexible access control while still being able mitigate some most serious risks devices. The DR BACA can easily be managed, even large business environments with many We show that deployed used ease. With proper policy, evaluation shows effectively posed malicious vulnerable non-malicious applications incurring only small overall overhead.