Understanding Android Security
By William Enck, Machigar Ongtang, Patrick Drew McDaniel. IEEE Security & Privacy Magazine, 2009
632 citations recorded by the source corpus.
Subfields: Sociology and Political Science, Signal Processing
View Paper: https://www.semanticscholar.org/paper/724cc8ef4661cb4e7223977b5367ba1bf27aaf86
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Sociology and Political Science
- Xinwen Zhang
- William Enck
- Patrick Drew McDaniel
- Earlence Fernandes
- Machigar Ongtang
- Zhong Ming
- Mauro Conti
- Somesh Jha
In Signal Processing
- Xuxian Jiang
- Yajin Zhou
- Lorenzo Cavallaro
- Christopher Krügel
- Ahmad-Reza Sadeghi
- Kimberly Tam
- David A. Wagner
- Giovanni Vigna
Citations in the corpus
- “Andromaly”: a behavioral malware detection framework for android devices (2012, background): “Andromaly differs from earlier efforts enhance Android security such as Kirin system ( Enck et al. 2008, 2009 ) and Secure Application INTeraction (SAINT) (Hwang et al. 2009).”
- An Android Application Sandbox system for suspicious software detection (2010, background): “However, despite the fact that Android is a young mobile OS if compared to Apple’s iOS or Nokia’s Symbian, several publications discuss Android-specific security mechanisms, involving overall security assessment of the platform [5, 31], malware detection [29], application permission analysis [8], an”
- A Study of Android Application Security (2011, background): “We search for non-secure coding practices [17, 10], including: writing sensitive information to logs, unprotected broadcasts of information, IPC null checks, injection attacks on intent actions, and delegation.”
- SCanDroid: Automated Security Certification of Android (2009, background): “A related line of work [9, 8, 12] reports a logic-based tool, Kirin, for determining whether the permissions declared by an application satisfy a certain global safety policy.”
- A methodology for empirical analysis of permission-based security models and its application to android (2010, methodology): “Android uses this permission model to restrict access to advanced or dangerous functionality on the device [14].”
- PiOS: Detecting Privacy Leaks in iOS Applications (2011, background): “[11] present an approach named Kirin where they automatically extract the security manifest of Android applications.”
- Semantically Rich Application-Centric Security in Android (2009, methodology): “We then introduce goals, design, and implementation of the Saint system.”
- Privilege Escalation Attacks on Android (2010, neutral): “[12] describe Android security mechanisms in details.”
- *droid (2016, methodology): “Prior work has described these abstractions in detail [Enck et al. 2009].”
- Privacy Protection for Preventing Data Over-Collection in Smart City (2016, methodology): “presented an approach named Kirin [16] where they automatically extract the security manifest of Android apps.”
- Towards Taming Privilege-Escalation Attacks on Android (2012, background): “Thus, the resulting application communication is often referred to as inter-component communication (ICC) [18] to differentiate it from IPCs at the kernel level.”
- XManDroid: A New Android Evolution to Mitigate Privilege Escalation Attacks (2011, background): “More detailed information can be found in [13, 15, 40, 39].”
- CopperDroid: Automatic Reconstruction of Android Malware Behaviors (2015, methodology): “X http://dx.doi.org/10.14722/ndss.2015.23145 Our framework, titled CopperDroid2, is an approach built on top of QEMU [6] to automatically perform out-of-the-box (VMI-based) dynamic analysis and reconstruct the behaviors of Android malware.”
- Automating GUI testing for Android applications (2011, background): “Enck, Ongtang, and McDaniel’s [20] describe Kirin, a logic-based tool for Android that ensures permissions needed by a certain Android application are met by global safety invariants.”
- Apex: extending Android permission model and enforcement with user-defined runtime constraints (2010, background): “A conjunction of Kirin [7] with our extended package installer may remedy this problem by analyzing the constraints and permissions to verify that broader security goals are not being violated.”
- Android Security: A Survey of Issues, Malware Penetration, and Defenses (2015, neutral): “[35].”
- A Survey on Security for Mobile Devices (2013, background): “[149] presents a review of current security solutions for Android platforms.”