Poster: the quest for security against privilege escalation attacks on android

Authors:
Sven Bugiel;Lucas Davi;Alexandra Dmitrienko;Thomas Fischer;Ahmad-Reza Sadeghi;Bhargava Shastry
Affiliations:
Technische Universität Darmstadt, Darmstadt, Germany;Technische Universität Darmstadt, Darmstadt, Germany;Fraunhofer SIT, Darmstadt, Germany;Ruhr-Universität Bochum, Bochum, Germany;Technische Universität Darmstadt, Fraunhofer SIT, Darmstadt, Germany;Fraunhofer SIT, Darmstadt, Germany
Venue:
Proceedings of the 18th ACM conference on Computer and communications security
Year:
2011

Citing 4
Cited 0

Privilege escalation attacks on android

ISC'10 Proceedings of the 13th international conference on Information security
Analyzing inter-application communication in Android

MobiSys '11 Proceedings of the 9th international conference on Mobile systems, applications, and services
Quire: lightweight provenance for smart phone operating systems

SEC'11 Proceedings of the 20th USENIX conference on Security
A Virtualization Assurance Language for Isolation and Deployment

POLICY '11 Proceedings of the 2011 IEEE International Symposium on Policies for Distributed Systems and Networks

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper we present the design and implementation of a security framework that extends the reference monitor of the Android middleware and deploys a mandatory access control on Linux kernel (based on Tomoyo [9]) aiming at detecting and preventing application-level privilege escalation attacks at runtime. In contrast to existing solutions, our framework is system-centric, efficient, detects attacks that involve communication channels controlled by both, Android middleware and the Linux kernel (particularly, Binder IPC, Internet sockets and file system). It can prevent known confused deputy attacks without false positives and is also flexible enough to prevent unknown confused deputy attacks and attacks by colluding applications (e.g., Soundcomber [11]) at the cost of a small rate of false positives.