Detecting over-claim permission and recognizing dangerous permission using static analysis in Android apps

Abstract

Android’s security is one of the hot research topic in current days. This is mainly due to leakage of user’s privacy information from third party apps on mobile. Even after permission model defined by Android we all are witnessing leakage of our critical information. This is mainly due to (1) Permission model is proportionally coarse granular (2) Insufficient knowledge of user make him approve over-claim permission mistakenly. Henceforth this paper focus in recognizing dangerous over-claim permission. This starts with describing permission model,over-claim permission and some of the dangerous over-claim permission which is described. This work specifically propose an algorithm to detect signature of dangerous permission incorporated during upgrading version of third-party software.