SELint: an SEAndroid policy analysis tool

Elena Reshetova; Filippo Bonazzi; N Asokan

SELint: an SEAndroid policy analysis tool

Elena Reshetova, Filippo Bonazzi, N Asokan

Tutkimustuotos: Työpaperi › Working paper › Professional

Abstrakti

SEAndroid enforcement is now mandatory for Android devices. In order to provide the desired level of security for their products, Android OEMs need to be able to minimize their mistakes in writing SEAndroid policies. However, existing SEAndroid and SELinux tools are not very useful for this purpose. It has been shown that SEAndroid policies found in commercially available devices for multiple manufacturers contain mistakes and redundancies. In this paper we present a new tool, SELint, which aims to help OEMs to produce better SEAndroid policies. SELint is extensible and configurable to suit the needs of different OEMs. It is provided with a default configuration based on the AOSP SEAndroid policy, but can be customized by OEMs.

Alkuperäiskieli	Englanti
Julkaisupaikka	arXiv
Sivumäärä	13
Tila	Julkaistu - 8 elok. 2016
OKM-julkaisutyyppi	D4 Julkaistu kehittämis- tai tutkimusraportti taikka -selvitys

Julkaisusarja

Nimi	arXiv preprints

Pääsy asiakirjaan

https://arxiv.org/abs/1608.02339

1 Conference article in proceedings

Characterizing SEAndroid policies in the wild
Reshetova, E., Bonazzi, F., Nyman, T., Borgaonkar, R. & Asokan, N., 2016, ICISSP 2016 - Proceedings of the 2nd International Conference on Information Systems Security and Privacy. SciTePress, s. 482-489 8 Sivumäärä
Tutkimustuotos: Artikkeli kirjassa/konferenssijulkaisussa › Conference article in proceedings › Scientific › vertaisarvioitu
3 Sitaatiot (Scopus)

Siteeraa tätä

@techreport{57141581de4e4b9e86ff13fcc243d342,

title = "SELint: an SEAndroid policy analysis tool",

abstract = "SEAndroid enforcement is now mandatory for Android devices. In order to provide the desired level of security for their products, Android OEMs need to be able to minimize their mistakes in writing SEAndroid policies. However, existing SEAndroid and SELinux tools are not very useful for this purpose. It has been shown that SEAndroid policies found in commercially available devices for multiple manufacturers contain mistakes and redundancies. In this paper we present a new tool, SELint, which aims to help OEMs to produce better SEAndroid policies. SELint is extensible and configurable to suit the needs of different OEMs. It is provided with a default configuration based on the AOSP SEAndroid policy, but can be customized by OEMs.",

author = "Elena Reshetova and Filippo Bonazzi and N Asokan",

year = "2016",

month = aug,

day = "8",

language = "English",

series = "arXiv preprints",

type = "WorkingPaper",

}

TY - UNPB

T1 - SELint: an SEAndroid policy analysis tool

AU - Reshetova, Elena

AU - Bonazzi, Filippo

AU - Asokan, N

PY - 2016/8/8

Y1 - 2016/8/8

N2 - SEAndroid enforcement is now mandatory for Android devices. In order to provide the desired level of security for their products, Android OEMs need to be able to minimize their mistakes in writing SEAndroid policies. However, existing SEAndroid and SELinux tools are not very useful for this purpose. It has been shown that SEAndroid policies found in commercially available devices for multiple manufacturers contain mistakes and redundancies. In this paper we present a new tool, SELint, which aims to help OEMs to produce better SEAndroid policies. SELint is extensible and configurable to suit the needs of different OEMs. It is provided with a default configuration based on the AOSP SEAndroid policy, but can be customized by OEMs.

AB - SEAndroid enforcement is now mandatory for Android devices. In order to provide the desired level of security for their products, Android OEMs need to be able to minimize their mistakes in writing SEAndroid policies. However, existing SEAndroid and SELinux tools are not very useful for this purpose. It has been shown that SEAndroid policies found in commercially available devices for multiple manufacturers contain mistakes and redundancies. In this paper we present a new tool, SELint, which aims to help OEMs to produce better SEAndroid policies. SELint is extensible and configurable to suit the needs of different OEMs. It is provided with a default configuration based on the AOSP SEAndroid policy, but can be customized by OEMs.

M3 - Working paper

T3 - arXiv preprints

BT - SELint: an SEAndroid policy analysis tool

CY - arXiv

ER -

SELint: an SEAndroid policy analysis tool

Abstrakti

Julkaisusarja

Pääsy asiakirjaan

Sormenjälki

Tutkimustuotos

Characterizing SEAndroid policies in the wild

Siteeraa tätä