TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones

DMCA

TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones (2010)

Cached

Download Links

by William Enck , Landon P. Cox , Jaeyeon Jung, et al.

Citations:

498 - 23 self

BibTeX

@MISC{Enck10taintdroid:an,
    author = {William Enck and Landon P. Cox and Jaeyeon Jung and et al.},
    title = { TaintDroid: An Information-Flow Tracking System for Realtime Privacy Monitoring on Smartphones},
    year = {2010}
}

OpenURL

Abstract

Today’s smartphone operating systems fail to provide users with adequate control and visibility into how third-party applications use their private data. We present TaintDroid, an efficient, system-wide dynamic taint tracking and analysis system for the popular Android platform that can simultaneously track multiple sources of sensitive data. TaintDroid’s efficiency to perform real-time analysis stems from its novel system design that leverages the mobile platform’s virtualized system architecture. TaintDroid incurs only 14 % performance overhead on a CPU-bound micro-benchmark with little, if any, perceivable overhead when running thirdparty applications. We use TaintDroid to study the behavior of 30 popular third-party Android applications and find several instances of misuse of users ’ private information. We believe that TaintDroid is the first working prototype demonstrating that dynamic taint tracking and analysis provides informed use of third-party applications in existing smartphone operating systems.

Keyphrases

realtime privacy monitoring information-flow tracking system third-party application dynamic taint tracking system-wide dynamic taint tracking thirdparty application popular android platform multiple source performance overhead cpu-bound micro-benchmark private data user private information popular third-party android application real-time analysis taintdroid efficiency adequate control sensitive data several instance novel system design perceivable overhead informed use analysis system present taintdroid mobile platform virtualized system architecture

DMCA