FILTERING MEANS FOR TRACKING INFORMATION FLOW IN ANDROID OPERATED DEVICES

摘要

Security features of an Android operating system device using a data flow tracking filter are described. The data flow tracking filter uses a message filter model to track sensitive data in the Android operating system device through I/O channels to provide users with control over when the data attempts to leave the device through a network interface, thus exposing how third party applications use user private data. The data tracking filter also enables operating at the kernel level so intercept of all standard channels of communication is possible.

主权项

1. A device for tracking sensitive data using a data flow tracking filter comprising:
an application; a system call wrapper in communication with the application, the system call wrapper being capable of receiving a system call from the application; a plurality of message filters in communication with the system call wrapper, the plurality of message filters capable of intercepting the system call and determining whether information read by the system call is sensitive, the plurality of message filters further being capable of alerting a user when a process flagged as containing sensitive information invokes a send system call; a state machine in communication with the plurality of message filters, the state machine being capable of changing a state of the process when the system call is reading sensitive information.