Permission-Educator: App for Educating Users About Android Permissions
Permission-Educator: App for Educating Users About Android Permissions
复制标题
Permission-Educator：用于对用户进行 Android 权限教育的应用程序
DOI：
10.1007/978-3-030-98404-5_34
复制
发表时间：
2022
期刊：
影响因子：
--
通讯作者：
Yang, Xiaoli
中科院分区：
文献类型：
--
作者：
Mathur, Akshay;Ewoldt, Ethan;Niyaz, Quamar;Javaid, Ahmad;Yang, Xiaoli
网络攻击和恶意软件感染是当今大多数操作系统（OS）所面临的问题。在智能手机中，Android操作系统更容易受到恶意软件的感染。尽管Android已经引入了多种机制来避免网络攻击，包括谷歌Play Protect、动态权限和登录控制通知，但针对Android手机的网络攻击仍然很普遍，而且还在不断增加。大多数恶意软件使用关键权限来访问资源和数据，从而危及智能手机的安全。这背后的一个关键原因是缺乏对用户权限使用的了解。在本文中，我们介绍permission - educators，这是一个基于云的服务，用于教育用户在基于android的智能手机上安装的应用程序相关的权限。我们开发了一个Android应用程序作为客户端，允许用户将智能手机上安装的应用程序分类为系统应用程序或商店应用程序。用户可以通过客户端应用程序与云服务的交互来了解特定应用程序的权限，并识别该应用程序是良性的还是恶意的。我们将该服务与web服务器集成在一起，方便用户上传任何Android应用程序包文件，例如apk，以提取有关Android应用程序的信息并将其显示给用户。
Cyberattacks and malware infestation are issues that surround most operating systems (OS) these days. In smartphones, Android OS is more susceptible to malware infection. Although Android has introduced several mechanisms to avoid cyberattacks, including Google Play Protect, dynamic permissions, and sign-in control notifications, cyberattacks on Android-based phones are prevalent and continuously increasing. Most malware apps use critical permissions to access resources and data to compromise smartphone security. One of the key reasons behind this is the lack of knowledge for the usage of permissions in users. In this paper, we introducePermission-Educator, a cloud-based service to educate users about the permissions associated with the installed apps in an Android-based smartphone. We developed an Android app as a client that allows users to categorize the installed apps on their smartphones as system or store apps. The user can learn about permissions for a specific app and identify the app as benign or malware through the interaction of the client app with the cloud service. We integrated the service with a web server that facilitates users to upload any Android application package file, i.e.apk, to extract information regarding the Android app and display it to the user.