Towards a Formal Approach for Detection of Vulnerabilities in the Android Permissions System
نویسندگان
1 Faculty of Computer Engineering, Department of Software Engineering, University of Isfahan, Isfahan, Iran.
2 MDSE Research Group, Department of Software Engineering, University of Isfahan, Isfahan, Iran.
3 Faculty of Computer Engineering, Department of Software Engineering, University of Isfahan, Isfahan, Iran.
doi
10.22042/isecure.2022.14.3.7چکیده
Android is a widely used operating system that employs a permission-based access control model. The Android Permissions System (APS) is responsible for mediating application resource requests. APS is a critical component of the Android security mechanism; hence, a failure in the design of APS can potentially lead to vulnerabilities that grant unauthorized access to resources by malicious applications. In this paper, we present a formal approach for modeling and verifying the security properties of APS. We demonstrate the usability of the proposed approach by showcasing the detection of a well-knownvulnerability found in Android’s custom permissions.
