- 期刊
- OpenAccess
An Operation-Injection Approach to Detect Runtime Permission Crashes of Android Apps
摘要
Starting from Android API 23, Android apps need to request appropriate runtime permissions before accessing restrict data or performing restrict actions, such as reading files or taking photos. Further, users can revoke the permissions that were previously granted to an app in system settings later or even during runtime of the app by keeping the app in background, going to system settings to disable the permissions, and returning back to the app. This can cause an app to crash if the app doesn't handle the runtime permissions carefully. To automatically detect the crashes related to runtime permissions, this paper proposes an approach in which a crawler is first used to explore and detect permission crashes of Android apps systematically. During the exploration, a state model is also produced. Based on the model, test paths related to runtime permissions are generated. These test paths are further injected with operations to revoke the already granted permissions and executed using a test runner directly to detect the crashes that can occur if users disable the granted permissions manually. The experimental results show that the proposed approach can detect runtime permission crashes effectively.
延伸閱讀
- Hsiao, S. W. (2013). PasDroid: A Real-Time Malware Protection Scheme for Android Systems [master's thesis, National Taiwan University]. Airiti Library. https://doi.org/10.6342/NTU.2013.03128
- Teng, Y. C. (2014). Android Malware Detection with Dynamic User Intention Based Analysis [master's thesis, National Taiwan University]. Airiti Library. https://doi.org/10.6342/NTU.2014.01968
- 姜家安（2012）。Two-tier Android Malware Detection with Permission Pre-filter and Static Analysis〔碩士論文，國立交通大學〕。華藝線上圖書館。https://doi.org/10.6842/NCTU.2012.00791
- 孫建興（2012）。A Behavior-Based Malware Detection Study on the Android Devices〔碩士論文，大同大學〕。華藝線上圖書館。https://www.airitilibrary.com/Article/Detail?DocID=U0081-3001201315113570
- Chen, C., Liu, Y., Shen, B., & Cheng, J. J. (2018). Android Malware Detection Based on Static Behavior Feature Analysis. 電腦學刊, 29(6), 243-253. https://doi.org/10.3966/199115992018122906024