Anzeige
Erschienen in:
2019 | OriginalPaper | Buchkapitel
Malicious Intentions: Android Internet Permission Security Risks
verfasst von : John Mark Andah, Jinfu Chen
Erschienen in: Cyberspace Safety and Security
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
Abstract
Many Android applications access internet networks to query, retrieve or transmit digital resources. The current version of the Android Operating System (OS) fails to provide sufficient control to the user over the amount of internet access an application has. This raises concerns for data security. Significant user data vulnerability is introduced when applications can perform unsolicited data collection in the background without user knowledge. This paper analyzes the permissions of a cross-section of android applications. We focus on the INTERNET permission, and how its classification introduces significant vulnerability onto a user’s device. Subsequently, we create a proof of concept app that exploits private user data using social engineering. Our findings conclude that the INTERNET permission is a critical permission, prone to exploitation and lacks sufficient user control in the Android OS. We propose methods for the control and protection of data by the Android system.