一句话：提出 Terminator，用时序逻辑模型检测识别 Android 应用的权限威胁，并在运行时按安全状态临时授予或撤销权限。
权限诱导攻击（由权限滥用引发的安全漏洞）是威胁 Android 设备安全的最关键、最频繁问题之一。已有防护方案在分析与执行中忽略了攻击的时序性，因而检测覆盖率低、防护干扰度高。本文提出 Terminator——一个面向 Android 的时序权限分析与强制执行框架。其分析器借助时序逻辑模型检测，针对应用的动态权限状态识别权限诱导威胁；其运行时执行器在系统处于安全状态时选择性地向应用“租借”（即临时授予）权限，而当系统进入已识别威胁所对应的不安全状态时则撤销这些权限。作者在数千个应用上开展实验，结果表明 Terminator 能够对权限诱导攻击提供有效且低干扰的防御；同时该方案无需修改 Android 框架或应用的实现逻辑，因而具有很高的可靠性与广泛的适用性。
Permission-induced attacks, i.e., security breaches enabled by permission misuse, are among the most critical and frequent issues threatening the security of Android devices. By ignoring the temporal aspects of an attack during the analysis and enforcement, the state-of-the-art approaches aimed at protecting the users against such attacks are prone to have low-coverage in detection and high-disruption in prevention of permission-induced attacks. To address this shortcomings, we present Terminator, a temporal permission analysis and enforcement framework for Android. Leveraging temporal logic model checking,Terminator's analyzer identifies permission-induced threats with respect to dynamic permission states of the apps. At runtime, Terminator's enforcer selectively leases (i.e., temporarily grants) permissions to apps when the system is in a safe state, and revokes the permissions when the system moves to an unsafe state realizing the identified threats. The results of our experiments, conducted over thousands of apps, indicate that Terminator is able to provide an effective, yet non-disruptive defense against permission-induced attacks. We also show that our approach, which does not require modification to the Android framework or apps' implementation logic, is highly reliable and widely applicable.
@inproceedings{paperbot4533,
title = {A temporal permission analysis and enforcement framework for Android},
author = {Alireza Sadeghi and Reyhaneh Jabbarvand and Negar Ghorbani and Hamid Bagheri and Sam Malek},
booktitle = {ICSE},
year = {2018},
doi = {10.1145/3180155.3180172}
}