Introducing Probabilities in Contract-Based Approaches for Mobile Application Security

摘要: Security for mobile devices is a problem of capital importance, especially due to new threats coming from malicious applications. This has been proved by the increasing interest research community on topic security devices. Several solutions have recently proposed, address uprising However, several mechanisms may result not flexible enough, hard apply, or too coarse grained, e.g. critics raised against Android permission system. We argue that, it possible obtain more tools and finer grained requirements introducing probability measurements. In this paper we discuss how introduce probabilistic clauses into Security-by-Contract Security-by-Contract-with-Trust frameworks, revising main building blocks providing write contracts policies. A proof-of-concept implementation system also presented.