TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones
TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones
复制标题
DOI：
10.1145/2619091
复制
发表时间：
2014-06-01
影响因子：
1.5
通讯作者：
Sheth, Anmol N.
中科院分区：
文献类型：
--
作者：
Enck, William;Gilbert, Peter;Sheth, Anmol N.
今天的智能手机操作系统经常无法为用户提供第三方应用程序如何收集和共享其私人数据的可见性。我们解决这些缺点与TaintDroid，一个有效的，系统范围内的动态污点跟踪和分析系统，能够同时跟踪多个来源的敏感数据。TaintDroid通过利用Android的虚拟化执行环境实现实时分析。TaintDroid在CPU绑定的微基准测试中仅产生32%的性能开销，对交互式第三方应用程序的开销可以忽略不计。在我们2010年的研究中，我们使用TaintDroid来监控30个流行的第三方Android应用程序的行为，发现20个应用程序可能滥用用户的私人信息;在我们2012年的研究中，测试应用程序中也有类似的部分。使用TaintDroid监控隐私敏感数据的流动为智能手机用户和寻求识别行为不端的应用程序的安全服务公司提供了有价值的输入。
Today's smartphone operating systems frequently fail to provide users with visibility into how third-party applications collect and share their private data. We address these shortcomings with TaintDroid, an efficient, system-wide dynamic taint tracking and analysis system capable of simultaneously tracking multiple sources of sensitive data. TaintDroid enables realtime analysis by leveraging Android's virtualized execution environment. TaintDroid incurs only 32% performance overhead on a CPU-bound microbenchmark and imposes negligible overhead on interactive third-party applications. Using TaintDroid to monitor the behavior of 30 popular third-party Android applications, in our 2010 study we found 20 applications potentially misused users' private information; so did a similar fraction of the tested applications in our 2012 study. Monitoring the flow of privacy-sensitive data with TaintDroid provides valuable input for smartphone users and security service firms seeking to identify misbehaving applications.