Skip to main content
Article
What permissions should this Android app request?
SATE 2016: Proceedings of International Conference on Software Analysis, Testing and Evolution: Proceedings: Kunming, November 3-4, 2016
  • Lingfeng BAO, Zhejiang University
  • David LO, Singapore Management University
  • Xin XIA, Zhejiang University
  • Shanping LI, Zhejiang University
Publication Type
Conference Proceeding Article
Version
acceptedVersion
Publication Date
11-2016
Abstract

As Android is one of the most popular open source mobile platforms, ensuring security and privacy of Android applications is very important. Android provides a permission mechanism which requires developers to declare sensitive resources their applications need, and users need to agree with this request when they install (for Android API level 22 or lower) or run (for Android API level 23) these applications. Although Android provides very good official documents to explain how to properly use permissions, unfortunately misuses even for the most popular permissions have been reported. Recently, Karim et al. propose an association rule mining based approach to better infer permissions that an API needs. In this work, to improve the effectiveness of the prior work, we propose an approach which is based on collaborative filtering technique, one of popular techniques used to build recommendation systems. Our approach is designed based on the intuition that apps that have similar features - inferred from the APIs that they use - usually share similar permissions. We evaluate the proposed approaches on 936 Android apps from F-Droid, which is a repository of free and open source Android applications. The experimental results show that our proposed approaches achieve significant improvement in terms of the precision, recall, F1-score and MAP of the top-k results over Karim et al.'s approach.

Keywords
  • Android,
  • Association Rule,
  • Collaborative Filtering,
  • Permission Recommendation
ISBN
9781509045174
Identifier
10.1109/SATE.2016.13
Publisher
IEEE
City or Country
Piscataway, NJ
Copyright Owner and License
Authors
Creative Commons License
Creative Commons Attribution-NonCommercial-No Derivative Works 4.0 International
Additional URL
https://doi.org/10.1109/SATE.2016.13
Citation Information
Lingfeng BAO, David LO, Xin XIA and Shanping LI. "What permissions should this Android app request?" SATE 2016: Proceedings of International Conference on Software Analysis, Testing and Evolution: Proceedings: Kunming, November 3-4, 2016 (2016) p. 1 - 6
Available at: http://works.bepress.com/david_lo/353/