Design And Implementation Of Android Fine-grained Authorization Management System

With rapid increasing share of Android in the mobile phone market, a lot of malwares emerge. The most common misbehavior is leaking privacy of user data. The privacy Android users is becoming serious due to the drawbacks in Android permission mechanism. Therefore a mechanism which can help the user analyze and manage apps that are probably leaking user privacy is necessary.The privacy protection system on the basis of which we design and implement a fine-grained authorization management system mainly considers the actual behaviors of apps leaking privacy, and the efficacy and convenience of the formulating strategies. The main contributions of our work are as follows:(1) We give the mapping of privacy-preservation-related permissions and associated APIs by analyzing the permission mechanism of Android and the samples of the privacy-leaking behaviors of malwares.(2) We provide an analysis report tool for privacy leakage of apps utilizing static analysis method to help the user with privacy protection.(3) We design and implement a fine-grained authorization management system, which offers to the user a dynamic fine-grained privacy authorization management mechanism that is able to set runtime limitation strategies to authorized privacy permissions. We implement an automatically re-package mechanism to carry out fine-grained access control through the addition of privacy-preserving module to apps in Android market.The experiment results show that the fine-grained authorization management system we proposed in this paper can help users making privacy protection strategies. The system can implement fine-grained control on the request permissions of applications and prevent the leakage of user privacy effectively and efficiently.