AFrame: Isolating advertisements from mobile applications in android

Xiao Zhang; Amit Ahlawat; Wenliang Du

doi:10.1145/2523649.2523652

AFrame: Isolating advertisements from mobile applications in android

Xiao Zhang, Amit Ahlawat, Wenliang Du

Department of Electrical Engineering & Computer Science

Research output: Chapter in Book/Entry/Poem › Conference contribution

53 Scopus citations

Abstract

Android uses a permission-based security model to restrict applications from accessing private data and privileged resources. However, the permissions are assigned at the application level, so even untrusted third-party libraries, such as advertisement, once incorporated, can share the same privileges as the entire application, leading to over-privileged problems. We present AFrame, a developer friendly method to isolate untrusted third-party code from the host applications. The isolation achieved by AFrame covers not only the process/permission isolation, but also the display and input isolation. Our AFrame framework is implemented through a minimal change to the existing Android code base; our evaluation results demonstrate that it is effective in isolating the privileges of untrusted third-party code from applications with reasonable performance overhead.

Original language	English (US)
Title of host publication	Proceedings - 29th Annual Computer Security Applications Conference, ACSAC 2013
Pages	9-18
Number of pages	10
DOIs	https://doi.org/10.1145/2523649.2523652
State	Published - 2013
Event	29th Annual Computer Security Applications Conference, ACSAC 2013 - New Orleans, LA, United States Duration: Dec 9 2013 → Dec 13 2013

Publication series

Name	ACM International Conference Proceeding Series

Other

Other	29th Annual Computer Security Applications Conference, ACSAC 2013
Country/Territory	United States
City	New Orleans, LA
Period	12/9/13 → 12/13/13

ASJC Scopus subject areas

Software
Human-Computer Interaction
Computer Vision and Pattern Recognition
Computer Networks and Communications

Access to Document

10.1145/2523649.2523652

Cite this

Zhang, X, Ahlawat, A & Du, W 2013, AFrame: Isolating advertisements from mobile applications in android. in Proceedings - 29th Annual Computer Security Applications Conference, ACSAC 2013. ACM International Conference Proceeding Series, pp. 9-18, 29th Annual Computer Security Applications Conference, ACSAC 2013, New Orleans, LA, United States, 12/9/13. https://doi.org/10.1145/2523649.2523652

@inproceedings{288e53ed168d40ad9f8c29dad246e2e7,

title = "AFrame: Isolating advertisements from mobile applications in android",

abstract = "Android uses a permission-based security model to restrict applications from accessing private data and privileged resources. However, the permissions are assigned at the application level, so even untrusted third-party libraries, such as advertisement, once incorporated, can share the same privileges as the entire application, leading to over-privileged problems. We present AFrame, a developer friendly method to isolate untrusted third-party code from the host applications. The isolation achieved by AFrame covers not only the process/permission isolation, but also the display and input isolation. Our AFrame framework is implemented through a minimal change to the existing Android code base; our evaluation results demonstrate that it is effective in isolating the privileges of untrusted third-party code from applications with reasonable performance overhead.",

author = "Xiao Zhang and Amit Ahlawat and Wenliang Du",

year = "2013",

doi = "10.1145/2523649.2523652",

language = "English (US)",

isbn = "9781450320153",

series = "ACM International Conference Proceeding Series",

pages = "9--18",

booktitle = "Proceedings - 29th Annual Computer Security Applications Conference, ACSAC 2013",

}

TY - GEN

T1 - AFrame

T2 - 29th Annual Computer Security Applications Conference, ACSAC 2013

AU - Zhang, Xiao

AU - Ahlawat, Amit

AU - Du, Wenliang

PY - 2013

Y1 - 2013

N2 - Android uses a permission-based security model to restrict applications from accessing private data and privileged resources. However, the permissions are assigned at the application level, so even untrusted third-party libraries, such as advertisement, once incorporated, can share the same privileges as the entire application, leading to over-privileged problems. We present AFrame, a developer friendly method to isolate untrusted third-party code from the host applications. The isolation achieved by AFrame covers not only the process/permission isolation, but also the display and input isolation. Our AFrame framework is implemented through a minimal change to the existing Android code base; our evaluation results demonstrate that it is effective in isolating the privileges of untrusted third-party code from applications with reasonable performance overhead.

AB - Android uses a permission-based security model to restrict applications from accessing private data and privileged resources. However, the permissions are assigned at the application level, so even untrusted third-party libraries, such as advertisement, once incorporated, can share the same privileges as the entire application, leading to over-privileged problems. We present AFrame, a developer friendly method to isolate untrusted third-party code from the host applications. The isolation achieved by AFrame covers not only the process/permission isolation, but also the display and input isolation. Our AFrame framework is implemented through a minimal change to the existing Android code base; our evaluation results demonstrate that it is effective in isolating the privileges of untrusted third-party code from applications with reasonable performance overhead.

UR - http://www.scopus.com/inward/record.url?scp=84893257561&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84893257561&partnerID=8YFLogxK

U2 - 10.1145/2523649.2523652

DO - 10.1145/2523649.2523652

M3 - Conference contribution

AN - SCOPUS:84893257561

SN - 9781450320153

T3 - ACM International Conference Proceeding Series

SP - 9

EP - 18

BT - Proceedings - 29th Annual Computer Security Applications Conference, ACSAC 2013

Y2 - 9 December 2013 through 13 December 2013

ER -

AFrame: Isolating advertisements from mobile applications in android

Abstract

Publication series

Other

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this