{"id":"https://openalex.org/W3029787669","doi":"https://doi.org/10.1145/3381991.3395396","title":"Analysis of Access Control Enforcement in Android","display_name":"Analysis of Access Control Enforcement in Android","publication_year":2020,"publication_date":"2020-05-29","ids":{"openalex":"https://openalex.org/W3029787669","doi":"https://doi.org/10.1145/3381991.3395396","mag":"3029787669"},"language":"en","primary_location":{"id":"doi:10.1145/3381991.3395396","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3381991.3395396","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3381991.3395396","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 25th ACM Symposium on Access Control Models and Technologies","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3381991.3395396","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024034310","display_name":"William Enck","orcid":"https://orcid.org/0000-0002-3043-8092"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"William Enck","raw_affiliation_strings":["North Carolina State University, Raleigh, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5024034310"],"corresponding_institution_ids":["https://openalex.org/I137902535"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"117","last_page":"118"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9815999865531921,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.7417721152305603},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6315308213233948},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.5656896233558655},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.5455817580223083},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.544677197933197},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.39212268590927124},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2168603241443634}],"concepts":[{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.7417721152305603},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6315308213233948},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.5656896233558655},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.5455817580223083},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.544677197933197},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.39212268590927124},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2168603241443634},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3381991.3395396","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3381991.3395396","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3381991.3395396","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 25th ACM Symposium on Access Control Models and Technologies","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3381991.3395396","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3381991.3395396","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3381991.3395396","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 25th ACM Symposium on Access Control Models and Technologies","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.6000000238418579,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G2432218565","display_name":"TWC: Medium: Collaborative: Improving Mobile-Application Security via Text Analytics","funder_award_id":"1513690","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3366966419","display_name":null,"funder_award_id":"W911NF-16-1","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G4143225217","display_name":null,"funder_award_id":"W911NF-16-1-0299","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G5690666889","display_name":null,"funder_award_id":"CNS-1513690","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G657448715","display_name":null,"funder_award_id":"W911NF-16-1-","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G7145350082","display_name":"CAREER: Secure OS Views for Modern Computing Platforms","funder_award_id":"1253346","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7452299184","display_name":null,"funder_award_id":"W911NF","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G7730874732","display_name":null,"funder_award_id":"CNS-1253346","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7753761262","display_name":null,"funder_award_id":"CNS-1253346 and CNS-1513690","funder_id":"https://openalex.org/F4320315254","funder_display_name":"Innovative Research Group Project of the National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320315254","display_name":"Innovative Research Group Project of the National Natural Science Foundation of China","ror":null},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3029787669.pdf","grobid_xml":"https://content.openalex.org/works/W3029787669.grobid-xml"},"referenced_works_count":1,"referenced_works":["https://openalex.org/W4244726870"],"related_works":["https://openalex.org/W1991580985","https://openalex.org/W4226026301","https://openalex.org/W4360993851","https://openalex.org/W2099704814","https://openalex.org/W3046446793","https://openalex.org/W3125992077","https://openalex.org/W2138148318","https://openalex.org/W1580010780","https://openalex.org/W2002233996","https://openalex.org/W2165251242"],"abstract_inverted_index":{"Over":[0,654],"the":[1,4,25,60,80,87,91,106,137,147,159,193,240,286,301,319,343,357,364,375,381,421,429,447,464,472,479,499,511,516,555,563,579,636,655],"past":[2,194],"decade,":[3],"Android":[5,30,51,107,127,422,448,534,709],"operating":[6,532],"system":[7,167,202,216,268,338,483,521,538,558,570],"install-base":[8],"has":[9,109,188],"proliferated":[10],"to":[11,50,53,71,93,103,145,155,284,317,345,373,384,396,410,420,431,540,568,586,598,613,627,633,649,665,695,701],"billions":[12],"of":[13,24,29,35,62,66,126,130,141,152,175,184,201,210,274,288,303,321,359,366,377,467,502,519,547,557,638,657,675,708],"devices,":[14],"rivaling":[15],"Microsoft":[16],"Windows":[17],"as":[18,42,79,606,608,705],"a":[19,122,208,314,388,442,520,525,604,643],"top":[20],"computing":[21],"platform.":[22,138],"One":[23],"most":[26,530],"attractive":[27],"aspects":[28],"is":[31,144,179,246,251,611,632],"its":[32,54,117],"vast":[33,607],"collection":[34],"applications,":[36,105,186],"available":[37],"from":[38,86],"application":[39],"stores":[40],"such":[41,78],"Google's":[43],"Play":[44],"Store.":[45],"Developers":[46],"have":[47,128,219,403,661,677,714],"been":[48,189,678,715],"drawn":[49],"due":[52],"semantically-rich":[55],"runtime":[56],"APIs,":[57],"which":[58,187,204,400,676],"simplify":[59],"creation":[61],"third-party":[63,104,185,548],"applications.":[64,549],"Many":[65],"these":[67,101,298],"APIs":[68,102],"provide":[69],"access":[70,118,133,160,248,289,322,349,405,580],"security-":[72],"and":[73,76,90,95,150,157,213,262,265,282,361,363,623,651,669,718],"privacy-sensitive":[74],"information":[75],"resources":[77],"device's":[81,88],"geographic":[82],"location,":[83],"audio":[84],"recorded":[85],"microphone,":[89],"ability":[92],"send":[94],"receive":[96],"SMS":[97],"messages.":[98],"In":[99,292,417,603],"providing":[100],"OS":[108],"implicitly":[110],"taken":[111],"responsibility":[112],"for":[113,149,554,642],"their":[114],"protection,":[115],"increasing":[116],"control":[119,134,161,249,290,323,350,406,581],"burden.":[120],"As":[121,528],"result,":[123],"current":[124],"versions":[125,707],"thousands":[129],"manually":[131],"placed":[132],"checks":[135,162,257,277,324,413],"throughout":[136],"The":[139,169,197,215],"goal":[140,631],"this":[142,293],"talk":[143],"motivate":[146],"need":[148],"utility":[151],"semi-automated":[153],"tools":[154,664,689,713],"analyze":[156],"validate":[158],"that":[163,183,278,386,490,687],"occur":[164],"within":[165,239],"Android's":[166,176,233,326,569],"code.":[168],"challenges":[170,299],"are":[171,205,255,551,710,719],"two-fold.":[172],"First,":[173],"analysis":[174,461,466],"middleware":[177,327],"code":[178,198,344],"more":[180],"challenging":[181],"than":[182],"studied":[190],"in-depth":[191],"over":[192],"decade":[195],"[3-5].":[196],"spans":[199],"hundreds":[200],"services,":[203],"implemented":[206],"in":[207,229,300,325,336,370,478,524],"combination":[209],"Java,":[211],"C++,":[212],"C.":[214],"services":[217,269,571],"also":[218,270,409,700],"heavy":[220],"inter-dependencies":[221],"with":[222,529,646],"one":[223,495],"another,":[224,496],"frequently":[225,493],"invoking":[226],"entry":[227,334,401,469,476,491,517,566],"points":[228,402,492,567],"each":[230,332,337,378],"other":[231],"using":[232,328],"Binder":[234,333],"inter-process":[235],"communication":[236],"(IPC)":[237],"framework":[238],"Linux":[241],"kernel.":[242],"Second,":[243],"identifying":[244],"what":[245,412],"an":[247,272,439,468],"check":[250,379],"nontrivial.":[252],"While":[253],"there":[254],"well-known":[256],"based":[258],"on":[259,380,545,578,721],"user-authorized":[260],"permissions":[261],"Linux-layer":[263],"user":[264],"group":[266],"identifiers,":[267],"use":[271],"array":[273],"different":[275,482,526],"service-specific":[276],"must":[279],"be":[280,415,432,618,628,691],"captured":[281,619],"modeled":[283],"assess":[285,318],"correctness":[287,320],"enforcement.":[291],"talk,":[294],"we":[295,427,445,456,488,660,685],"will":[296,308],"discuss":[297,446],"context":[302],"two":[304],"case":[305],"studies.":[306],"We":[307],"begin":[309],"by":[310,462,508,561,584,681],"discussing":[311],"ACMiner":[312,340,355,390,419,585,593,622],"[6],":[313],"tool":[315],"designed":[316,597,626],"consistency":[329],"analysis.":[330],"For":[331],"point":[335,470,477,518],"service,":[339],"statically":[341],"analyzes":[342],"identify":[346,397,587,650,696],"all":[347,600],"potential":[348,588],"checks.":[351],"To":[352],"do":[353,506],"so,":[354],"uses":[356,392,535],"names":[358],"methods":[360],"variables":[362],"values":[365],"constant":[367],"strings":[368],"used":[369,692],"conditional":[371],"statements":[372],"infer":[374],"security-semantics":[376],"control-flow":[382,465],"path":[383],"instructions":[385],"throw":[387],"SecurityException.":[389],"then":[391],"association":[393],"rule":[394],"mining":[395],"not":[398,438,693],"only":[399,694],"inconsistent":[404],"checks,":[407],"but":[408,699],"suggest":[411],"should":[414],"added.":[416],"applying":[418],"Open":[423],"Source":[424],"Project":[425],"(AOSP),":[426],"found":[428,489],"suggestions":[430],"invaluable":[433],"when":[434,471,504],"determining":[435],"whether":[436],"or":[437,481,514,594],"inconsistency":[440],"was":[441],"vulnerability.":[443],"Next,":[444],"Re-Delegation":[449],"Finder":[450],"(ARF)":[451],"[7].":[452],"When":[453],"designing":[454],"ACMiner,":[455],"optimized":[457],"our":[458,658,663,688],"static":[459],"program":[460],"terminating":[463],"execution":[473,503],"reaches":[474],"another":[475],"same":[480],"service.":[484],"Upon":[485],"further":[486],"study,":[487],"call":[494],"often":[497],"changing":[498],"protection":[500,556],"domain":[501,647],"they":[505],"(e.g.,":[507],"explicitly":[509],"clearing":[510],"calling":[512,515,564],"identity,":[513,565],"service":[522],"executing":[523],"process).":[527],"modern":[531],"systems,":[533],"deputies":[536],"(i.e.,":[537],"services)":[539],"safely":[541],"perform":[542],"privileged":[543],"functionality":[544],"behalf":[546],"Deputies":[550],"inherently":[552],"necessary":[553],"resources.":[559],"However,":[560],"losing":[562],"can":[572,617,690],"become":[573],"confused":[574,589],"deputies.":[575],"ARF":[576,595,624],"builds":[577],"policy":[582],"extracted":[583],"deputy":[590],"vulnerabilities.":[591,653],"Neither":[592],"were":[596,625],"eliminate":[599],"false":[601],"positives.":[602],"code-base":[605],"Android,":[609],"it":[610,640],"unrealistic":[612],"expect":[614],"every":[615],"nuance":[616],"programmatically.":[620],"Instead,":[621],"semi-automated.":[629],"Our":[630],"drastically":[634],"reduce":[635],"amount":[637],"time":[639],"takes":[641],"security":[644],"analyst":[645],"expertise":[648],"fix":[652],"course":[656],"research,":[659],"applied":[662],"AOSP":[666],"versions~7,":[667],"8,":[668],"9,":[670],"discovering":[671],"many":[672],"vulnerabilities,":[673,698],"seven":[674],"assigned":[679],"CVEs":[680],"Google.":[682],"Moving":[683],"forward,":[684],"hope":[686],"new":[697,706],"aid":[702],"regression":[703],"testing":[704],"released.":[711],"Both":[712],"made":[716],"open-source":[717],"hosted":[720],"Github":[722],"[1,2].":[723]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}