Full metadata record
DC FieldValueLanguage
dc.contributor.authorHsu, Chia-Weien_US
dc.contributor.authorChang, Chia-Hueien_US
dc.contributor.authorWang, Chi-Weien_US
dc.contributor.authorShieh, Shiuhpyngen_US
dc.date.accessioned2018-08-21T05:54:31Z-
dc.date.available2018-08-21T05:54:31Z-
dc.date.issued2017-09-01en_US
dc.identifier.issn1016-2364en_US
dc.identifier.urihttp://dx.doi.org/10.6688/JISE.2017.33.5.8en_US
dc.identifier.urihttp://hdl.handle.net/11536/146057-
dc.description.abstractThe leakage of sensitive data has been a major concern in Android ecosystem. Analysts therefore propose dynamical taint tracking to effectively track the data flow of accessed data. However, the off-the-shelf taint tracking systems lack byte-granularity support for storage tracking. In this paper, we propose DROIT+ which uses the fine-grained storage tracking technique to track data flow among Android storages. DROIT+ is able to reveal the composition of data flows. Storage tracking on Android is difficult since data flows of apps may span heterogeneous media including memory, SD cards, NAND Flash, and network adapters. To capture a whole picture of data flows in storage, we formally define data flow and propose our method from both logical and physical perspectives. The method has also been implemented as an extension to the proposed tracking system, DROIT. Two case studies and two benchmark tools are used for the evaluation in terms of storage tracking ability, network tracking ability, and efficiency, respectively. The result shows that DROIT+ provides a better coverage using byte-granularity taint tracking.en_US
dc.language.isoen_USen_US
dc.subjectmobile securityen_US
dc.subjectinformation flowen_US
dc.subjectAndroiden_US
dc.subjectfile systemen_US
dc.subjecttaint trackingen_US
dc.titleDROIT plus : Taint Tracking for Storage Access on Androiden_US
dc.typeArticleen_US
dc.identifier.doi10.6688/JISE.2017.33.5.8en_US
dc.identifier.journalJOURNAL OF INFORMATION SCIENCE AND ENGINEERINGen_US
dc.citation.volume33en_US
dc.citation.spage1237en_US
dc.citation.epage1254en_US
dc.contributor.department資訊工程學系zh_TW
dc.contributor.departmentDepartment of Computer Scienceen_US
dc.identifier.wosnumberWOS:000410465400008en_US
Appears in Collections:Articles