Android multi-level system permission management approach

作者：Luo Yang^*; Zhang Qi-Xun; Shen Qing-Ni; Liu Hong-Zhi; Wu Zhong-Hai

来源：Journal of Software, 2015, 26: 263-271.

• Android applications
• Application permissions
• Application security
• Evaluation algorithm
• Permission check
• Request evaluation
• Security policy
• SELinux

With the expansion of the market share occupied by the Android platform, security issues (especially application security) have become attention focus of researchers. In fact, the existing methods lack the capabilities to manage application permissions without root privilege. This study proposes a dynamic management mechanism of Android application permissions based on security policies. The paper first describes the permissions by security policies, then implementes permission checking code and request evaluation algorithm in Android framework layer. Experimental results indicate that the presented approach succeeds in permission management of Android applications, and its system overhead is low, which makes it an effective method for Android permission management.

• 出版日期2015
• 单位北京大学