Formal Characterization of Illegal Control Flow in Android System - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2013

Formal Characterization of Illegal Control Flow in Android System

Résumé

The dynamic taint analysis mechanism is used to protect sensitive data in the Android system. But this technique does not detect control flows which can cause an under-tainting problem. This means that some values should be marked as tainted, but are not. The under-tainting problem can be the cause of a failure to detect a leak of sensitive information. To solve this problem, we use a set of formally defined rules that describes the taint propagation. We prove the completeness of these rules. Also, we provide a correct and complete algorithm based on these rules to solve the under-tainting problem.
Fichier principal
Vignette du fichier
bare_conf.pdf (300.26 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-00924480 , version 1 (06-01-2014)

Identifiants

  • HAL Id : hal-00924480 , version 1

Citer

Mariem Graa, Nora Cuppens-Bouhlahia, Frédéric Cuppens, Ana Cavalli. Formal Characterization of Illegal Control Flow in Android System. SITIS 2013 : 9th International Conference on Signal Image Technology & Internet Systems, Dec 2013, Kyoto, Japan. ⟨hal-00924480⟩
181 Consultations
327 Téléchargements

Partager

Gmail Facebook X LinkedIn More