CliSeAu for Android Applications: Design, Case Studies, and
Evaluation.


CliSeAu is a tool for dynamically enforcing runtime policies
for Java programs in a decentralized and distributed fashion.
The goal of this Master Thesis is to extend CliSeAu so that it
can also be used to enforce runtime policies in Android
applications. While Android is based on Java, it introduces some
new aspects that are platform specific and has a different format
for executable applications than plain Java. The developed
extension should provide an accessible interface to Android's
peculiarities like the Application life-cycle and interprocess
communication model. Also, it should allow for fast enforcement
during program runtime. The performance of the instrumentation
will be evaluated using empirical analyses.

The focus of this talk is the presentation of the core challenges
of the thesis and key results of the first evaluations. These
include the runtime overhead of the intermediate implementation
results as well as insights gained regarding the design of a
robust evaluation system. I will show that CliSeAu users do not
need to handle life-cycle callbacks if the desired policy does not
require it but can easily access them otherwise. Finally, I will
also provide an outlook on the main concepts that are still to be
designed and implemented.