Construcción semiautomática de políticas de seguridad SEAndroid para aplicaciones móviles

"When users install an application on an Android mobile phone, they accept or deny a set of permissions that are required by the application. This scheme has a problem for the protection of sensitive information, because users don't have the adequate training to take this type of decisions...

Full description

Autores:
Mancipe Díaz, María Paula
Tipo de recurso:
Trabajo de grado de pregrado
Fecha de publicación:
2017
Institución:
Universidad de los Andes
Repositorio:
Séneca: repositorio Uniandes
Idioma:
spa
OAI Identifier:
oai:repositorio.uniandes.edu.co:1992/61339
Acceso en línea:
http://hdl.handle.net/1992/61339
Palabra clave:
Aplicaciones móviles
Rights
openAccess
License
http://creativecommons.org/licenses/by-nc-nd/4.0/
Description
Summary:"When users install an application on an Android mobile phone, they accept or deny a set of permissions that are required by the application. This scheme has a problem for the protection of sensitive information, because users don't have the adequate training to take this type of decisions. Security Enhanced Android or SEAndroid is the integration of SELinux on Android to improve the access control. However, the complexity of constructing a policy on SEAndroid and the lack of experience of developers have led to defining rules that grant more privileges than those strictly necessary for the application. This project aims to guide developers on the construction of security policies on SEAndroid, to maintain the integrity and confidentiality of an application information, through a criteria model that evaluates the permissions set required by an application. The criteria model is implemented by means of a semiautomatic tool that evaluates the permissions manifest of an application and generates a high-level security policy. This policy is a guide to define the SEAndroid policy".-- Tomado del Formato de Documento de Grado.