Lecture

Excessive Permissions: Mobile Apps Security

Graph Chat

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.

Description

This lecture discusses the risks associated with mobile apps that request excessive permissions, presenting examples of apps with exaggerated permissions and exploring manual attacks, security vulnerabilities, and defense strategies based on permission adequacy, publisher credibility, and installation necessity.

Official source

Related concepts (18)

Mobile app

A mobile application or app is a computer program or software application designed to run on a mobile device such as a phone, tablet, or watch. Mobile applications often stand in contrast to desktop applications which are designed to run on desktop computers, and web applications which run in mobile web browsers rather than directly on the mobile device.

Mobile game

A mobile game, or smartphone game, is a video game that is typically played on a mobile phone. The term also refers to all games that are played on any portable device, including from mobile phone (feature phone or smartphone), tablet, PDA to handheld game console, portable media player or graphing calculator, with and without network availability. The earliest known game on a mobile phone was a Tetris variant on the Hagenuk MT-2000 device from 1994. In 1997, Nokia launched Snake.

Vulnerability (computing)

Vulnerabilities are flaws in a computer system that weaken the overall security of the device/system. Vulnerabilities can be weaknesses in either the hardware itself, or the software that runs on the hardware. Vulnerabilities can be exploited by a threat actor, such as an attacker, to cross privilege boundaries (i.e. perform unauthorized actions) within a computer system. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness.

Mobile app development

Mobile app development is the act or process by which a mobile app is developed for one or more mobile devices, which can include personal digital assistants (PDA), enterprise digital assistants (EDA), or mobile phones. Such software applications are specifically designed to run on mobile devices, taking numerous hardware constraints into consideration. Common constraints include CPU architecture and speeds, available memory (RAM), limited data storage capacities, and considerable variation in displays (technology, size, dimensions, resolution) and input methods (buttons, keyboard, touch screens with/without styluses).

App store

An app store (or app marketplace) is a type of digital distribution platform for computer software called applications, often in a mobile context. Apps provide a specific set of functions which, by definition, do not include the running of the computer itself. Complex software designed for use on a personal computer, for example, may have a related app designed for use on a mobile device. Today apps are normally designed to run on a specific operating system—such as the contemporary iOS, macOS, Windows, Linux or Android—but in the past mobile carriers had their own portals for apps and related media content.

Related lectures (48)

Protecting your data

Emphasizes the importance of data protection, covering threats, risks, prevention, and real-life examples of data loss incidents.

Smart Beard Trimmer: Shave Me!

Introduces a smart beard trimmer with an app for previewing and selecting beard styles, aiming to revolutionize the beard grooming market.

Gamification: Introduction and Techniques

Introduces the history and techniques of gamification in various contexts.

Protecting Your Work and EPFL

Emphasizes protecting work and EPFL through laws, regulations, identifying threats, and securing hardware.

Mobile Platforms: Architecture & Development