Caractérisation et étude de l’impact des permissions dans les applications mobiles
Android provides a security model based on permissions to third-party application developers, who control access to system resources, including hardware, settings, and user data. This search examines a set of permission data for more than 130,000 existing apps on the Google Play Store on how they can affect smartphone users. The goal is to identify patterns of permissions usage and to better understand the patterns in permissions from the users' point of view. We report results on thousands of applications and we observe a negative correlation between the score of conformance to the patterns that we calculated for each application, the average rating and the price.  This project also presents an empirical study of the Android permission model, allowing to observe the use of permission sets by third-party developers in similar applications and to identify the risk levels associated with different combinations of permissions in the Android applications. We found that Internet access permission was used by over 70% of applications and that the two most common permissions that access user information are ACCESS_FINE_LOCATION and ACCESS_COARSE_LOCATION.  The study showed that the conformance score is not a risk indicator and is not an indicator of sustainability. On the other hand, the degree of use of dangerous permissions is at the same time a risk indicator and an indicator of durability, in fact, the applications which request more dangerous permissions are more likely to be malicious applications and to be deleted from Google Play store. Likewise, we've found that user satisfaction reflects both risk and sustainability, as less-rated apps are more likely to be malicious apps and removed from the Google Play store.
Permissions Android Android permissions Risk Personal data Android applications Permission-based security Smartphone operating systems Access control List