期刊
ACM TRANSACTIONS ON COMPUTER SYSTEMS
卷 32, 期 2, 页码 -出版社
ASSOC COMPUTING MACHINERY
DOI: 10.1145/2619091
关键词
Design; Security; Performance; Information-flow tracking; privacy monitoring; smartphones; mobile apps
资金
- Engineering Research Center of Excellence Program of Korea Ministry of Science, ICT & Future Planning (MSIP)/National Research Foundation of Korea (NRF) [NRF-2008-0062609]
- Direct For Computer & Info Scie & Enginr
- Division Of Computer and Network Systems [0905447] Funding Source: National Science Foundation
- Direct For Computer & Info Scie & Enginr
- Division Of Computer and Network Systems [1228700] Funding Source: National Science Foundation
- National Research Foundation of Korea [2008-0062609] Funding Source: Korea Institute of Science & Technology Information (KISTI), National Science & Technology Information Service (NTIS)
Today's smartphone operating systems frequently fail to provide users with visibility into how third-party applications collect and share their private data. We address these shortcomings with TaintDroid, an efficient, system-wide dynamic taint tracking and analysis system capable of simultaneously tracking multiple sources of sensitive data. TaintDroid enables realtime analysis by leveraging Android's virtualized execution environment. TaintDroid incurs only 32% performance overhead on a CPU-bound microbenchmark and imposes negligible overhead on interactive third-party applications. Using TaintDroid to monitor the behavior of 30 popular third-party Android applications, in our 2010 study we found 20 applications potentially misused users' private information; so did a similar fraction of the tested applications in our 2012 study. Monitoring the flow of privacy-sensitive data with TaintDroid provides valuable input for smartphone users and security service firms seeking to identify misbehaving applications.
作者
我是这篇论文的作者
点击您的名字以认领此论文并将其添加到您的个人资料中。
推荐
暂无数据