Level 2b Clause Samples

Level 2b. Inter-App Permission Analysis‌ Within Level 2b the Android App Analysis tool will support inter-App data resource usage. This is an extension to the functionality of Level 1. But in this level our tool additionally computes the resources used by an App via any sort of supported intent (explicit and implicit) without further restrictions. Hence, it covers the possibility to use data resources indirectly by calling another App’s component. For computing the data resource usages, a graph which models all possible inter-component calls via intents is computed. Moreover, this graph contains all direct resource usages of components. An example usage graph is given in Figure 4. It shows two Apps containing Application 1 Application 2 Component I Component II Component III Resources Permission A Permission B Permission C Component II Component I Figure 4: Example usage graph a different amount of components. The solid arrows symbolize the communication between these components through intents of any kind. On the other hand the dashed arrows reflect the direct resource usage of components. The analysis of resource usage will be done with a least fixpoint computation within the computed graph and on top of the resource usage identification of Level 1, namely the mapping of intents and system calls to permissions. Afterward we are able to classify direct and additionally indirect resource usages like in Level 1.