all InfoSec news
IIFA: Modular Inter-app Intent Information Flow Analysis of Android Applications. (arXiv:1812.05380v1 [cs.SE] CROSS LISTED)
cs.CR updates on arXiv.org arxiv.org
Android apps cooperate through message passing via intents. However, when
apps do not have identical sets of privileges inter-app communication (IAC) can
accidentally or maliciously be misused, e.g., to leak sensitive information
contrary to users expectations. Recent research considered static program
analysis to detect dangerous data leaks due to inter-component communication
(ICC) or IAC, but suffers from shortcomings with respect to precision,
soundness, and scalability. To solve these issues we propose a novel approach
for static ICC/IAC analysis. We perform …
analysis android android apps app applications apps communication data detect flow iac information intent leak message modular privileges program program analysis research sensitive information