Flexible and fine-grained mandatory access control on Android for diverse security and privacy policies

摘要: In this paper we tackle the challenge of providing a generic security architecture for Android OS that can serve as flexible and effective ecosystem to instantiate different solutions. contrast prior work our architecture, termed FlaskDroid, provides mandatory access control simultaneously on both Android's middleware kernel layers. The alignment policy enforcement these two layers is non-trivial due their completely semantics. We present an efficient language (inspired by SELinux) tailored specifics show flexibility policy-driven instantiations selected models such existing Saint well new privacy-protecting, user-defined fine-grained per-app model. Other possible include phone booth mode, or dual persona phone. Finally evaluate implementation SE 4.0.4 illustrating its efficiency effectiveness.