An adaptive and configurable protection framework against android privilege escalation threats

摘要: Abstract Android is a successful mobile platform with thriving application ecosystem. However, despite its security precautions like permission mechanism, it still vulnerable to privilege escalation threats and particularly confused deputy attacks that exploit the leak vulnerabilities of applications. Worse, most existing detection protection techniques have become costly unresponsive in current dynamic environments. In this paper, we propose configurable framework prevent exploitation third-party applications via attacks. Our collects runtime states enforces policy capability-based access control restrain riskful inter-application communications, so as provide more responsive, adaptive, flexible protection. Besides, our provides users configuration together complementary mechanism mitigate risks induced by inappropriate policies. Additionally, present sophisticated decision cache system proactive maintenance method ensures efficiency dependability services. Theoretical analysis experimental evaluation demonstrate approach effective protections for against at small performance usability costs.