A methodology for empirical analysis of permission-based security models and its application to android

David Barrera; Hilmi Gunes Kayacik; Paul Van Oorschot; Anil Somayaji

doi:10.1145/1866307.1866317

A methodology for empirical analysis of permission-based security models and its application to android

David Barrera, Hilmi Gunes Kayacik, Paul Van Oorschot, Anil Somayaji

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

364 Citations (Scopus)

Abstract

Permission-based security models provide controlled access to various system resources. The expressiveness of the permission set plays an important role in providing the right level of granularity in access control. In this work, we present a methodology for the empirical analysis of permission-based security models which makes novel use of the Self-Organizing Map (SOM) algorithm of Kohonen (2001). While the proposed methodology may be applicable to a wide range of architectures, we analyze 1,100 Android applications as a case study.

Original language	English
Title of host publication	Proceedings of the 17th ACM conference on Computer and Communications Security (CCS'10)
Publisher	Association for Computing Machinery (ACM)
Pages	73-84
Number of pages	12
ISBN (Print)	9781450302449
DOIs	https://doi.org/10.1145/1866307.1866317
Publication status	Published - 2010
Event	17th ACM Conference on Computer and Communications Security - Hyatt Regency Chicago, Chicago, United States Duration: 4 Oct 2010 → 8 Oct 2010

Conference

Conference	17th ACM Conference on Computer and Communications Security
Abbreviated title	CCS 2010
Country/Territory	United States
City	Chicago
Period	4/10/10 → 8/10/10

Keywords

access control
visualization
permission-based security
self-organizing maps
smartphone operating systems

Documents and Links

10.1145/1866307.1866317

Cite this

@inproceedings{7a8ad1228b7e40688219f175706cc955,

title = "A methodology for empirical analysis of permission-based security models and its application to android",

abstract = "Permission-based security models provide controlled access to various system resources. The expressiveness of the permission set plays an important role in providing the right level of granularity in access control. In this work, we present a methodology for the empirical analysis of permission-based security models which makes novel use of the Self-Organizing Map (SOM) algorithm of Kohonen (2001). While the proposed methodology may be applicable to a wide range of architectures, we analyze 1,100 Android applications as a case study.",

keywords = "access control, visualization, permission-based security, self-organizing maps, smartphone operating systems",

author = "David Barrera and Kayacik, {Hilmi Gunes} and {Van Oorschot}, Paul and Anil Somayaji",

year = "2010",

doi = "10.1145/1866307.1866317",

language = "English",

isbn = "9781450302449",

pages = "73--84",

booktitle = "Proceedings of the 17th ACM conference on Computer and Communications Security (CCS'10)",

publisher = "Association for Computing Machinery (ACM)",

address = "United States",

note = "17th ACM Conference on Computer and Communications Security , CCS 2010 ; Conference date: 04-10-2010 Through 08-10-2010",

}

Barrera, D, Kayacik, HG, Van Oorschot, P & Somayaji, A 2010, A methodology for empirical analysis of permission-based security models and its application to android. in Proceedings of the 17th ACM conference on Computer and Communications Security (CCS'10). Association for Computing Machinery (ACM), pp. 73-84, 17th ACM Conference on Computer and Communications Security , Chicago, Illinois, United States, 4/10/10. https://doi.org/10.1145/1866307.1866317

A methodology for empirical analysis of permission-based security models and its application to android. / Barrera, David; Kayacik, Hilmi Gunes; Van Oorschot, Paul et al.

Proceedings of the 17th ACM conference on Computer and Communications Security (CCS'10). Association for Computing Machinery (ACM), 2010. p. 73-84.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - A methodology for empirical analysis of permission-based security models and its application to android

AU - Barrera, David

AU - Kayacik, Hilmi Gunes

AU - Van Oorschot, Paul

AU - Somayaji, Anil

PY - 2010

Y1 - 2010

N2 - Permission-based security models provide controlled access to various system resources. The expressiveness of the permission set plays an important role in providing the right level of granularity in access control. In this work, we present a methodology for the empirical analysis of permission-based security models which makes novel use of the Self-Organizing Map (SOM) algorithm of Kohonen (2001). While the proposed methodology may be applicable to a wide range of architectures, we analyze 1,100 Android applications as a case study.

AB - Permission-based security models provide controlled access to various system resources. The expressiveness of the permission set plays an important role in providing the right level of granularity in access control. In this work, we present a methodology for the empirical analysis of permission-based security models which makes novel use of the Self-Organizing Map (SOM) algorithm of Kohonen (2001). While the proposed methodology may be applicable to a wide range of architectures, we analyze 1,100 Android applications as a case study.

KW - access control

KW - visualization

KW - permission-based security

KW - self-organizing maps

KW - smartphone operating systems

UR - http://www.scopus.com/inward/record.url?eid=2-s2.0-78649990344&partnerID=8YFLogxK

U2 - 10.1145/1866307.1866317

DO - 10.1145/1866307.1866317

M3 - Conference contribution

AN - SCOPUS:78649990344

SN - 9781450302449

SP - 73

EP - 84

BT - Proceedings of the 17th ACM conference on Computer and Communications Security (CCS'10)

PB - Association for Computing Machinery (ACM)

T2 - 17th ACM Conference on Computer and Communications Security

Y2 - 4 October 2010 through 8 October 2010

ER -

A methodology for empirical analysis of permission-based security models and its application to android

Abstract

Conference

Keywords

Documents and Links

Other files and links

Fingerprint

Cite this