Context-Aware Security Framework for Android

The popularity of mobile devices has increased and therefore they have become major targets for attacks, especially the ones that involve stealing private information. On Android, security policies are approved at install time and can't be changed afterwards. This behavior gives the decision power to the developer, although the user should be in charge of what is happening on their device. Users mostly find a need to change permissions depending on their context (location, network, time of day, etc.). This paper proposes a method of implementing Context-Awareness security policies on Android through an extensible Context-Awareness Security Framework that works with policy files and third party providers of contextual information.