Fine-grained access control for hybrid mobile applications in Android using restricted paths

, Article 13th International ISC Conference on Information Security and Cryptology, 7 September 2016 through 8 September 2016 ; 2016 , Pages 85-90 ; 9781509039494 (ISBN) Pooryousef, S ; Amini, M ; Sharif University of Technology

Institute of Electrical and Electronics Engineers Inc 2016

Abstract

Hybrid Mobile Applications are a new generation of mobile applications that have recently introduced new security challenges. In these applications, untrusted web content, such as an advertisement inside an embedded browser, has the same privileges as the entire application and can directly access the device resources. Unfortunately, existing access control mechanisms are very coarse-grained and do not provide adequate facilities for fine-grained access rule definition and enforcement in hybrid mobile applications. In this paper, we propose a fine-grained access control mechanism for privilege separation in hybrid mobile applications. Our proposed access control mechanism, called...

Proposing a new feature for structure-aware analysis of android malwares

, Article 2017 14th International ISC (Iranian Society of Cryptology) Conference on Information Security and Cryptology, ISCISC 2017, 6 September 2017 through 7 September 2017 ; 2018 , Pages 111-118 ; 9781538665602 (ISBN) Pooryousef, S ; Fouladi, K ; Sharif University of Technology

2018

Abstract

Android is a major target of attackers for malicious purposes due to its popularity. Despite obvious malicious functionality of Android malware, its analysis is a challenging task. Extracting and using features that discriminate malicious and benign behaviors in applications is essential for malware classification in using machine learning methods. In this paper, we propose a new feature in Android malware classification process which in combination with other proposed features, can discriminate malicious and benign behaviors with a good accuracy. Using components such as activities and services in Android applications' source code will lead to different flows on invoking between...

Analysis of distribution of thrust, torque and efficiency of a constant chord, constant pitch C.R.P. fan by H.E.S. method

, Article World Academy of Science, Engineering and Technology ; Volume 79 , 2011 , Pages 546-550 ; 2010376X (ISSN) Abbaszadeh, M ; Nikpoorparizi, P ; Shahrooz, M ; Sharif University of Technology

2011

Abstract

For the first time since 1940 and presentation of theodorson's theory, distribution of thrust, torque and efficiency along the blade of a counter rotating propeller axial fan was studied with a novel method in this research. A constant chord, constant pitch symmetric fan was investigated with Reynolds Stress Turbulence method in this project and H.E.S. method was utilized to obtain distribution profiles from C.F.D. tests outcome. C.F.D. test results were validated by estimation from Playlic's analytical method. Final results proved ability of H.E.S. method to obtain distribution profiles from C.F.D test results and demonstrated interesting facts about effects of solidity and differences...

A Fine Grained Access Control Mechanism for Hybrid Mobile Applications in Android

, M.Sc. Thesis Sharif University of Technology Pooryousef, Shahrooz (Author) ; Kharrazi, Mehdi (Supervisor) ; Rabiee, HamidReza (Co-Advisor)

Abstract

Hybrid mobile applications combine the features of Web technologies and native mobile apps. Like Web applications, they are implemented in portable, platform independent languages such as HTML and JavaScript. Like native apps, they have direct access to local device resources. In these programs, web contents are loaded into a web component, called WebView, which can render HTML5 pages and execute JavaScript code. In order for the web content to access the system resources, which are isolated from the content inside Web-View due to its sandbox, bridges need to be built between JavaScript and the native code. developers usually use third party plug-ins for native side of application. hybrid...