Practical Context-Aware Permission Control for Hybrid Mobile Applications

摘要: The rapid growth of mobile computing has resulted in the development new programming paradigms for quick and easy applications. Hybrid frameworks, such as PhoneGap, allow use web technologies applications with native access to device's resources. These untrusted third-party desire user's data resources, leaving content vulnerable accidental or malicious leaks by hybrid frameworks present opportunities enhance security platforms providing an application-layer runtime controlling application's behavior. In this work, we a practical design novel framework, named MobileIFC, building privacy-preserving platforms. We information flow models control what can do they receive. utilize framework develop fine-grained, context-sensitive permission model that enables users application developers specify rich policies. show viability our means prototype. usability is further evaluated developing sample using APIs. Our evaluation experience suggests MobileIFC provides performant solution