A4 Refereed article in a conference publication
Self-aware access control system for android
Authors: Thanigaivelan N., Nigussie E., Virtanen S., Isoaho J.
Editors: Leonard Barolli, Tomoya Enokido
Conference name: International Conference on Innovative Mobile and Internet Services in Ubiquitous Computing
Publisher: Springer Verlag
Publication year: 2017
Book title : Innovative Mobile and Internet Services in Ubiquitous Computing
Journal name in source: Advances in Intelligent Systems and Computing
Series title: Advances in Intelligent Systems and Computing
Volume: 612
First page : 445
Last page: 454
Number of pages: 10
ISBN: 978-3-319-61541-7
eISBN: 978-3-319-61542-4
ISSN: 2194-5357
DOI: https://doi.org/10.1007/978-3-319-61542-4_42
We present the conceptual system design of self-aware access control system that enhance the security of Android platform. The objective of the self-awareness is to achieve optimal security through learning of application behaviors and then optimizing the access control policies accordingly. The self-configure, learn and optimize components of the self-aware agent are responsible for the autonomy of itself and the access control system. The cooperation of self-aware access control system with Android's permission model and user subsystem leads to better understanding of application activities and recognition of dynamic threat patterns. The access control system is customized to perform the monitoring tasks for the learning process. The mobile device activities are classified and two different context approaches, environment and attribute, are employed to achieve finer granular and diversified policies. The access control system is designed to enforce static and dynamic restriction on request calls to secure protected and open resources. The presented design is a preliminary abstraction that allows to realize self-aware access control system in Android.