Android Multi-Level System Permission Management Approach

TL;DR

This paper introduces a dynamic, policy-based permission management system for Android that enhances security without requiring root access, demonstrating low overhead and effective control.

Contribution

It presents a novel permission management mechanism based on security policies, implemented at the Android framework layer, addressing limitations of existing methods.

Findings

Successful permission management in Android applications

Low system overhead demonstrated in experiments

Effective security policy enforcement

Abstract

With the expansion of the market share occupied by the Android platform, security issues (especially application security) have become attention focus of researchers. In fact, the existing methods lack the capabilities to manage application permissions without root privilege. This study proposes a dynamic management mechanism of Android application permissions based on security policies. The paper first describes the permissions by security policies, then implementes permission checking code and request evaluation algorithm in Android framework layer. Experimental results indicate that the presented approach succeeds in permission management of Android applications, and its system overhead is low, which makes it an effective method for Android permission management.