Towards an Authorization Framework for App Security Checking
Joseph Hallett, David Aspinall · Edinburgh Research Explorer (University of Edinburgh) · 2014
Abstract. Apps don’t come with any guarantees that they are not ma-licious. This paper introduces a PhD project designing the authorization framework used for App Guarden. App Guarden is a new project that uses a flexible assurance framework based on distribution of evidence, attestation and checking algorithms to make explicit why an app isn’t dangerous and to allow users to describe how they want apps on their devices to behave. We use the SecPAL policy language to implement a device policy and give a brief example of a policy being used. Finally we use SecPAL to describe some of the differences between current app markets. 1