Taint-marking based access control model and its implementation on Android
WU Zezh · Journal of Computer Applications · 2014
For protecting the sensitive data on mobile operation system,a Taint-marking Based Access Control( TBAC) model was presented and a Taint-marking Information Flow Control( TIFC) framework was proposed. To improve fine-grained data sharing,labels were designed for each data. To support for least privilege characteristic,capacities were defined to each subject. To avoid accumulating of contamination,decontamination capacities of trust subjects were introduced. Compared with BLP,TBAC is more available,flexible and fine-grained. The results show TIFC is an effective,flexible and accurate framework in tracking and controlling the information flow at runtime,and TIFC solves the problem of covert channel caused by control flow during program execution.