IIT Home Page CNR Home Page

Evaluating the Trust of Android Applications through an Adaptive and Distributed Multi-criteria Approach

New generation mobile devices, and their app stores, lack of a methodology to associate a level of trust to applications to faithfully represent their potential security risks. This problem is even more critical with newly published applications, for which either user reviews are missing or the number of downloads is still low. In this scenario, users may not fully estimate the risk associated with downloading apps found on on-line stores. Hence, here we propose a methodology for evaluating the trust level of an application through an adaptive, flexible, and dynamic framework. The evaluation of an application trust is performed using both static and dynamic parameters, which consider the application meta-data, its run-time behavior and the reports of users with respect to the software critical operations. We have validated the proposed approach by testing it on more than 180 real applications found both on official and unofficial markets by showing that it correctly categorizes applications as trusted or untrusted in 94% of the cases and it is resilient to poisoning attacks.

TrustCom/ISPA/IUCC 2013, Melbourne, 2013

Autori esterni: Gianluca Dini (Dip Ingegneria Pisa)
Autori IIT:

Daniele Sgandurra

Foto di Daniele Sgandurra

Tipo: Articolo in Atti di convegno internazionale con referee
Area di disciplina: Information Technology and Communication Systems
http://ieeexplore.ieee.org/xpl/articleDetails.jsp?arnumber=6681013 DOI: 10.1109/TrustCom.2013.189 Da pagina 1541 a pagina 1546

Attività: Architetture, protocolli e meccanismi di sicurezza per sistemi e servizi distribuiti
Sicurezza di dispositivi mobili