RUNSECURE - Making the Droids more Secure


Smartphones have become ubiquitous. They typically contain users' private 
and confidential data. This data is increasingly becoming the target of 
malicious applications, which try to steal such information. Alternatively, 
malicious applications may cause direct financial harm to a user, for 
example, by sending premium-rate SMSes.
 
So as to mitigate these threats, we introduce RUNSECURE, a project that 
combines static information-flow tracking with dynamic bytecode instru-
mentation. It is a framework for policy enforcement on real-word Android 
applications. In our current approach, we first apply static analysis so 
as to pre-analyse the applications for potential policy violations. The 
results obtained during this state serve to direct the instrumentation 
of bytecode with instructions for dynamic policy enforcement.
 
The talk will give an overview of RUNSECURE and will show the current 
status of the project.