Dynamic Permission Re-enforcement Technique for Protecting Application from Others with Over-privileged Permission at Run Time

Recently users want to have more powerful devices and capabilities to satisfy their demands ever than before. However, there are many vulnerabilities caused by uncontrolled and over-privileged permission at run time. Without this concern to correctly control the permission at execution time, we propose dynamically enforce permission technique in the paper. For this purpose, we classify applications as secure or non-secure and validate their permissions at run time. If the secure one is already running, the other which has the same permission will be suspended until the former finishes his execution. Providing dynamic control of permission, we implement our technique on Android with slightly modifying a few Java classes in it. With the help of our proposed method, users can easily execute their secure application in separated from others and find over-privileged permission a run time. Through this technique we can efficiently prohibit unintended application's behavior to attain higher privilege without theirs acknowledgement.