DMCA
Curbing Android Permission Creep (2011)
| Venue: | In W2SP |
| Citations: | 41 - 6 self |
BibTeX
@INPROCEEDINGS{Vidas11curbingandroid,
author = {Timothy Vidas and Nicolas Christin and Lorrie Faith Cranor},
title = {Curbing Android Permission Creep},
booktitle = {In W2SP},
year = {2011}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Abstract—The Android platform has about 130 application level permissions that govern access to resources. The determination of which permissions to request is left solely to the application developer. Users are prompted to approve all application permissions at install time, and permissions are silently enforced at execution time. Although many applications make use of a wide range of permissions, we have observed that some applications request permissions that are not required for the application to execute, and that existing developer APIs make it difficult for developers to align their permission requests with application functionality. In this paper we describe a tool we developed to assist developers in utilizing least privilege.
