Batyuk, L., Herpich, M., Camtepe, S.A., Raddatz, K., Schmidt, A.D. and Albayrak, S. (2011) Using Static Analysis for Automatic Assessment and Mitigation of Unwanted and Malicious Activities within Android Applications. 2011 6th International Conference on Malicious and Unwanted Software (MALWARE), Fajardo, Puerto Rico, 18-19 October 2011, 66-72.
https://doi.org/10.1109/MALWARE.2011.6112328

has been cited by the following article:

• TITLE: Risks behind Device Information Permissions in Android OS

  AUTHORS: Ali Alshehri, Anthony Hewins, Maria McCulley, Hani Alshahrani, Huirong Fu, Ye Zhu

  KEYWORDS: Android, Security, Privacy, Device Identifiers, Permissions

  JOURNAL NAME: Communications and Network, Vol.9 No.4, November 10, 2017

  ABSTRACT: In the age of smartphones, people do most of their daily work using their smartphones due to significant improvement in smartphone technology. When comparing different platforms such as Windows, iOS, Android, and Blackberry, Android has captured the highest percentage of total market share [1]. Due to this tremendous growth, cybercriminals are encouraged to penetrate various mobile marketplaces with malicious applications. Most of these applications require device information permissions aiming to collect sensitive data without user’s consent. This paper investigates each element of system information permissions and illustrates how cybercriminals can harm users’ privacy. It presents some attack scenarios using READ_PHONE_STATE permission and the risks behind it. In addition, this paper refers to possible attacks that can be performed when additional permissions are combined with READ_PHONE_STATE permission. It also discusses a proposed solution to defeat these types of attacks.