A Systematic Security Evaluation of Android's Multi-User Framework

摘要: Like many desktop operating systems in the 1990s, Android is now process of including support for multi- user scenarios. Because these scenarios introduce new threats to system, we should have an understanding how well system design addresses them. Since security implications multi-user are truly pervasive, developed a systematic approach studying and identifying problems. Unlike other approaches that focus on specific attacks or threat models, ours systematically identifies critical places where access controls not present do properly identify subject object decision. Finding gives us insight into hypothetical could result, allows experiments test our hypothesis. Following overview features their imple- mentation, describe methodology, partial list most interesting hypotheses, used Our findings indicate current only partially threats, leaving door open number significant vulnerabilities privacy issues. span spectrum root causes, from simple oversights, all way major We conclude there still long go before can be anything more than casual sharing environments.