PermitMe: Integrating Android Permissioning Support in the IDE
One of the most common security & privacy issues concerning mobile applications is the unnecessary access to sensitive information and resources. In a mobile application platform like Android, where a permission mechanism is used to maintain access control, the app developer dictates what permissions are necessary at install time. For various reasons however, including user confusion and lack of proper documentation, developers may overcompensate for the necessary permissions, thus undermining the access control mechanism and increasing the potential risk from a vulnerability exploit. In this paper we present PermitMe, a tool developed as a plugin for the Eclipse IDE, to interactively guide developers on the set of required permissions when creating Android applications. We conducted a between-groups user study in order to evaluate the effectiveness, efficiency, and usability of the PermitMe tool in enhancing the developer’s experience when deciding on including Android permissions in their mobile applications.
Tue 21 OctDisplayed time zone: Tijuana, Baja California change
10:30 - 12:00 | |||
10:30 30mTalk | The Eclipse Runtime Perspective for Object-Oriented Code Exploration and Program Comprehension ETX Marwan Abi-Antoun Wayne State University, Andrew Giang Wayne State University, Sumukhi Chandrashekar Wayne State University, Ebrahim Khalaj Wayne State University | ||
11:00 30mTalk | Encouraging privacy by design concepts with privacy Policy Auto-Generation in Eclipse (PAGE) ETX | ||
11:30 30mTalk | PermitMe: Integrating Android Permissioning Support in the IDE ETX Emmanuel Bello-Ogunu University of North Carolina Charlotte, Mohammed Shehab University of North Carolina Charlotte |