NativeGuard: Protecting android applications from third-party native libraries

Mengtao Sun, Gang Tan

Research output: Chapter in Book/Report/Conference proceedingConference contribution

84 Scopus citations

Abstract

Android applications often include third-party libraries written in native code. However, current native components are not well managed by Android's security architecture. We present NativeGuard, a security framework that isolates native libraries from other components in Android applications. Leveraging the process-based protection in Android, NativeGuard isolates native libraries of an Android application into a second application where unnecessary privileges are eliminated. NativeGuard requires neither modifications to Android nor access to the source code of an application. It addresses multiple technical issues to support various interfaces that Android provides to the native world. Experimental results demonstrate that our framework works well with a set of real-world applications, and incurs only modest overhead on benchmark programs.

Original languageEnglish (US)
Title of host publicationWiSec 2014 - Proceedings of the 7th ACM Conference on Security and Privacy in Wireless and Mobile Networks
PublisherAssociation for Computing Machinery
Pages165-176
Number of pages12
ISBN (Print)9781450329729
DOIs
StatePublished - 2014
Event7th ACM Conference on Security and Privacy in Wireless and Mobile Networks, WiSec 2014 - Oxford, United Kingdom
Duration: Jul 23 2014Jul 25 2014

Publication series

NameWiSec 2014 - Proceedings of the 7th ACM Conference on Security and Privacy in Wireless and Mobile Networks

Other

Other7th ACM Conference on Security and Privacy in Wireless and Mobile Networks, WiSec 2014
Country/TerritoryUnited Kingdom
CityOxford
Period7/23/147/25/14

All Science Journal Classification (ASJC) codes

  • Computer Networks and Communications

Cite this