Hybrid User-level Sandboxing of Third-party Android Apps

摘要: Users of Android phones increasingly entrust personal information to third-party apps. However, recent studies reveal that many apps, even benign ones, could leak sensitive without user awareness or consent. Previous solutions either require modify the framework thus significantly impairing their practical deployment, be easily defeated by malicious apps using a native library.In this paper, we propose AppCage, system thoroughly confines run-time behavior requiring modifications root privilege. AppCage leverages two complimentary user-level sandboxes interpose and regulate an app's access APIs. Specifically, dex sandbox hooks into Dalvik virtual machine instance redirects each API proxy which strictly enforces user-defined policies, software fault isolation prevent libraries from directly accessing protected APIs subverting sandbox. We have implemented prototype AppCage. Our evaluation shows can successfully detect block attempts private performance overhead caused is negligible for minor with them.