A framework for static detection of privacy leaks in android applications
Authors:
Open Access
- 26 March 2012
- conference paper
- Published by Association for Computing Machinery (ACM)
- p. 1457-1462
Abstract
We report on applying techniques for static information flow analysis to identify privacy leaks in Android applications. We have crafted a framework which checks with the help of a security type system whether the Dalvik bytecode implementation of an Android app conforms to a given privacy policy. We have carefully analyzed the Android API for possible sources and sinks of private data and identified exemplary privacy policies based on this. We demonstrate the applicability of our framework on two case studies showing detection of privacy leaks.Keywords
This publication has 6 references indexed in Scilit:
- Defending Users against Smartphone Apps: Techniques and Future Directions2011
- Security-Typed Languages for Implementation of Cryptographic Protocols: A Case Study2005
- Information Flow Analysis for Java BytecodeLecture Notes in Computer Science, 2005
- A Typed Assembly Language for Non-interferenceLecture Notes in Computer Science, 2005
- Enforceable security policiesACM Transactions on Information and System Security, 2000
- Certification of programs for secure information flowCommunications of the ACM, 1977