On lightweight mobile phone application certification

By William Enck, Machigar Ongtang, Patrick Drew McDaniel. Conference on Computer and Communications Security, 2009

1,106 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Software, Signal Processing

View Paper: https://www.semanticscholar.org/paper/a7e8910b74715175cb20d9a08d34b3541060076b

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Software

In Signal Processing

Citations in the corpus

The Effectiveness of Application Permissions (2011, methodology): “Kirin [6] is a tool that evaluates the security of an Android application.”
Android permissions demystified (2011, background): “We investigate causes of overprivilege and .nd that many developer errors stem from confusion about the permission system.”
CopperDroid: Automatic Reconstruction of Android Malware Behaviors (2015, background): “Such an understanding is an interesting starting point for designing techniques to enforce security policies [42] and avoid the installation of apps requesting a dangerous combination [16] or an overprivileged set of permissions [18], [33].”
Detecting repackaged smartphone applications in third-party android marketplaces (2012, background): “Kirin [15] proposes to enhance the install process in Android to block possibly unsafe apps that request dangerous permission combinations.”
Apex: extending Android permission model and enforcement with user-defined runtime constraints (2010, background): “Our model is significantly different from related efforts [7, 1, 2] in that not only does it define an easy-to-use policy language, it is also user-centric.”
Android permissions: a perspective combining risks and benefits (2012, methodology): “The table shows for each rule in Kirin, the percent of malicious apps (out of 121) that fail the rule, and the percent of Android Market apps that fail it.”
DREBIN: Effective and Explainable Detection of Android Malware in Your Pocket (2014, methodology): “As shown by previous work [13, 33], malicious software tends to request certain permissions more often than innocuous applications.”
Dissecting Android Malware: Characterization and Evolution (2012, background): “Kirin [51] blocks the installation of suspicious apps by examining the existence of certain dangerous permission combination.”
A Survey on Security for Mobile Devices (2013, background): “Finally, [94, 95] propose Kirin security service for Android, which performs lightweight certification of applications to mitigate malware at install time.”
Aurasium: Practical Policy Enforcement for Android Applications (2012, background): “This prompted early work [21] on security policy extension for Android.”
Soundcomber: A Stealthy and Context-Aware Sound Trojan for Smartphones (2011, background): “Simultaneous access to microphone and networking is well known to be a dangerous combination of permissions that should not be bestowed to untrusted code [5], as a user's speech is not supposed to be recorded and transmitted to untrusted recipients.”
Analyzing inter-application communication in Android (2011, neutral): “Kirin [13] approaches third-party application security from the opposite perspective of our tool.”
A survey of mobile malware in the wild (2011, background): “presented potential incentives for mobile malware [26].”
Privilege Escalation Attacks on Android (2010, background): “The most relevant works to ours are Saint [19], Kirin [10, 11] and TaintDroid [9], as they can provide some measures against the privilege escalation attack.”
Using probabilistic generative models for ranking risks of Android apps (2012, methodology): “In the experiments we aim at understanding how well the different models satisfy the second desideratum, namely, able to assigning high risks to known malware apps, and compare them to methods in the literature [11, 24].”
Taming Information-Stealing Smartphone Applications (on Android) (2011, background): “On the defensive side, Kirin [10] is a framework for Android which extracts the permissions from an app’s manifest file at install time, and checks whether”
Unsafe exposure analysis of mobile in-app advertisements (2012, background): “For instance, Kirin [15] checks the manifest of apps that are being installed against a permission-assignment policy, blocking any that request certain potentially unsafe combinations.”