{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,3]],"date-time":"2026-05-03T10:59:57Z","timestamp":1777805997760,"version":"3.51.4"},"reference-count":52,"publisher":"SAGE Publications","issue":"4","license":[{"start":{"date-parts":[[2016,5,31]],"date-time":"2016-05-31T00:00:00Z","timestamp":1464652800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/journals.sagepub.com\/page\/policies\/text-and-data-mining-license"}],"content-domain":{"domain":["journals.sagepub.com"],"crossmark-restriction":true},"short-container-title":["Journal of Computer Security"],"published-print":{"date-parts":[[2016,8,16]]},"abstract":"<jats:p>As smartphones have become an indispensable part of daily life, mobile users are increasingly relying on them to process personal information with feature-rich applications. This situation requires robust security mechanisms for protecting sensitive applications and data on mobile devices. Android, as one the most popular smartphone operating systems, provides two core security mechanisms, application sandboxing and a permission system. However, recent studies show that these mechanisms are vulnerable to be passed by a variety of attacks. In this paper, we argue for the need of designing and implementing more comprehensive security mechanisms for Android. We realize that mediating Inter-Process Communication (IPC) channels used by Android applications can mitigate prominent attacks effectively and efficiently. Based on this observation, we propose a practical multi-layer security framework called TripleMon to support policy-based mediation on Android IPC. We also discuss and evaluate a proof-of-concept prototype of TripleMon along with the experimental results derived from real malware samples and synthetic attacks.<\/jats:p>","DOI":"10.3233\/jcs-160552","type":"journal-article","created":{"date-parts":[[2016,8,23]],"date-time":"2016-08-23T10:44:16Z","timestamp":1471949056000},"page":"405-426","update-policy":"https:\/\/doi.org\/10.1177\/sage-journals-update-policy","source":"Crossref","is-referenced-by-count":0,"title":["<scp>TripleMon<\/scp>\n                    : A multi-layer security framework for mediating inter-process communication on Android"],"prefix":"10.1177","volume":"24","author":[{"given":"Yiming","family":"Jing","sequence":"first","affiliation":[{"name":"Ira A. Fulton School of Engineering, Arizona State University, Tempe, AZ 85287, USA. E-mails:\u00a0,\u00a0,\u00a0,\u00a0"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gail-Joon","family":"Ahn","sequence":"additional","affiliation":[{"name":"Ira A. Fulton School of Engineering, Arizona State University, Tempe, AZ 85287, USA. E-mails:\u00a0,\u00a0,\u00a0,\u00a0"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hongxin","family":"Hu","sequence":"additional","affiliation":[{"name":"School of Computing, Clemson University, Clemson, SC 29634, USA. E-mail:\u00a0"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Haehyun","family":"Cho","sequence":"additional","affiliation":[{"name":"Ira A. Fulton School of Engineering, Arizona State University, Tempe, AZ 85287, USA. E-mails:\u00a0,\u00a0,\u00a0,\u00a0"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ziming","family":"Zhao","sequence":"additional","affiliation":[{"name":"Ira A. Fulton School of Engineering, Arizona State University, Tempe, AZ 85287, USA. E-mails:\u00a0,\u00a0,\u00a0,\u00a0"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"179","published-online":{"date-parts":[[2016,5,31]]},"reference":[{"key":"ref001","doi-asserted-by":"crossref","unstructured":"M.\u00a0Backes, S.\u00a0Bugiel, S.\u00a0Gerling and P.\u00a0von Styp-Rekowsky, Android Security Framework: Extensible multi-layered access control on Android, in: 30th Annual Computer Security Applications Conference (ACSAC\u201914), ACM, 2014.","DOI":"10.1145\/2664243.2664265"},{"key":"ref002","unstructured":"S.\u00a0Bugiel, L.\u00a0Davi, A.\u00a0Dmitrienko, T.\u00a0Fischer, A.\u00a0Sadeghi and B.\u00a0Shastry, Towards taming privilege-escalation attacks on Android, in: Proceedings of the 19th Network and Distributed System Security Symposium (NDSS 2012), San Diego, CA, 2012."},{"key":"ref003","doi-asserted-by":"crossref","unstructured":"S.\u00a0Bugiel, L.\u00a0Davi, A.\u00a0Dmitrienko, S.\u00a0Heuser, A.\u00a0Sadeghi and B.\u00a0Shastry, Practical and lightweight domain isolation on Android, in: Proceedings of the 1st ACM Workshop on Security and Privacy in Smartphones and Mobile Devices, ACM, 2011, pp.\u00a051\u201362. doi:10.1145\/2046614.2046624.","DOI":"10.1145\/2046614.2046624"},{"key":"ref004","unstructured":"S.\u00a0Bugiel, S.\u00a0Heuser and A.R.\u00a0Sadeghi, Flexible and fine-grained mandatory access control on Android for diverse security and privacy policies, in: 22nd USENIX Security Symposium (USENIX Security \u201913), USENIX, 2013."},{"key":"ref005","doi-asserted-by":"crossref","unstructured":"E.\u00a0Chin, A.\u00a0Felt, K.\u00a0Greenwood and D.\u00a0Wagner, Analyzing inter-application communication in Android, in: Proceedings of the 9th International Conference on Mobile Systems, Applications, and Services, ACM, 2011, pp.\u00a0239\u2013252.","DOI":"10.1145\/1999995.2000018"},{"key":"ref006","doi-asserted-by":"crossref","unstructured":"M.\u00a0Conti, V.\u00a0Nguyen and B.\u00a0Crispo, CRePE: Context-related policy enforcement for Android, in: Information Security, 2011, pp.\u00a0331\u2013345. doi:10.1007\/978-3-642-18178-8_29.","DOI":"10.1007\/978-3-642-18178-8_29"},{"key":"ref007","unstructured":"CVE-2009-1185, Exploid exploit for Android, http:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2009-1185."},{"key":"ref008","unstructured":"CVE-2009-2692, Asroot exploit for Android, http:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2009-2692."},{"key":"ref009","unstructured":"CVE-2011-1149, KillingInTheNameOf exploit for Android, http:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2011-1149."},{"key":"ref010","unstructured":"CVE-2011-1717, Skype stores sensitive user data in files that have weak permissions, http:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2011-1717."},{"key":"ref011","unstructured":"CVE-2011-1823, GingerBreak exploit for Android, http:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2011-1823."},{"key":"ref012","unstructured":"CVE-2011-3874, ZergRush exploit for Android, http:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2011-3874."},{"key":"ref013","unstructured":"CVE-2012-0056, Mempodipper exploit for Android, http:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2012-0056."},{"key":"ref014","unstructured":"CVE-2013-2094, Libperf_event exploit for Android, https:\/\/web.nvd.nist.gov\/view\/vuln\/detail?vulnId=CVE-2013-2094."},{"key":"ref015","doi-asserted-by":"crossref","unstructured":"L.\u00a0Davi, A.\u00a0Dmitrienko, A.\u00a0Sadeghi and M.\u00a0Winandy, Privilege escalation attacks on Android, in: Information Security, 2011, pp.\u00a0346\u2013360. doi:10.1007\/978-3-642-18178-8_30.","DOI":"10.1007\/978-3-642-18178-8_30"},{"key":"ref016","unstructured":"B.\u00a0Davis, B.\u00a0Sanders, A.\u00a0Khodaverdian and H.\u00a0Chen, I-arm-droid: A rewriting framework for in-app reference monitors for Android applications, in: Proceedings of the IEEE Mobile Security Technologies, 2012."},{"key":"ref017","unstructured":"DefCon 18, These are not the permissions you\u2019re looking for, 2010, http:\/\/goo.gl\/sxHyV."},{"key":"ref018","unstructured":"M.\u00a0Dietz, S.\u00a0Shekhar, Y.\u00a0Pisetsky, A.\u00a0Shu and D.\u00a0Wallach, Quire: Lightweight provenance for smart phone operating systems, in: 20th USENIX Security Symposium, 2011."},{"key":"ref019","unstructured":"Droid2, http:\/\/c-skills.blogspot.com\/2010\/08\/droid2.html."},{"key":"ref020","doi-asserted-by":"crossref","unstructured":"W.\u00a0Enck, Defending users against smartphone apps: Techniques and future directions, in: Information Systems Security, 2011, pp.\u00a049\u201370. doi:10.1007\/978-3-642-25560-1_3.","DOI":"10.1007\/978-3-642-25560-1_3"},{"key":"ref021","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2009.26"},{"key":"ref022","doi-asserted-by":"crossref","unstructured":"W.\u00a0Enck, M.\u00a0Ongtang and P.\u00a0McDaniel, On lightweight mobile phone application certification, in: Proceedings of the 16th ACM Conference on Computer and Communications Security, ACM, 2009, pp.\u00a0235\u2013245.","DOI":"10.1145\/1653662.1653691"},{"key":"ref023","doi-asserted-by":"crossref","unstructured":"A.\u00a0Felt, E.\u00a0Chin, S.\u00a0Hanna, D.\u00a0Song and D.\u00a0Wagner, Android permissions demystified, in: Proceedings of the 18th ACM Conference on Computer and Communications Security, ACM, 2011, pp.\u00a0627\u2013638.","DOI":"10.1145\/2046707.2046779"},{"key":"ref024","doi-asserted-by":"crossref","unstructured":"A.\u00a0Felt, M.\u00a0Finifter, E.\u00a0Chin, S.\u00a0Hanna and D.\u00a0Wagner, A survey of mobile malware in the wild, in: Proceedings of the 1st ACM Workshop on Security and Privacy in Smartphones and Mobile Devices, ACM, 2011, pp.\u00a03\u201314. doi:10.1145\/2046614.2046618.","DOI":"10.1145\/2046614.2046618"},{"key":"ref025","unstructured":"A.\u00a0Felt, K.\u00a0Greenwood and D.\u00a0Wagner, The effectiveness of application permissions, in: Proceedings of the USENIX Conference on Web Application Development, 2011."},{"key":"ref026","unstructured":"A.\u00a0Felt, H.\u00a0Wang, A.\u00a0Moshchuk, S.\u00a0Hanna and E.\u00a0Chin, Permission re-delegation: Attacks and defenses, in: Proceedings of the 20th USENIX Security Symposium, 2011."},{"key":"ref027","unstructured":"P.\u00a0Gilbert, B.\u00a0Chun, L.\u00a0Cox and J.\u00a0Jung, Automating privacy testing of smartphone applications, Technical Report CS-2011-02, Duke University, 2011."},{"key":"ref028","unstructured":"L.S.\u00a0Group, Zero-permission Android applications, http:\/\/leviathansecurity.com\/blog\/archives\/17-Zero-Permission-Android-Applications.html."},{"key":"ref029","doi-asserted-by":"crossref","unstructured":"H.\u00a0Hao, V.\u00a0Singh and W.\u00a0Du, On the effectiveness of api-level access control using bytecode rewriting in Android, in: Proceedings of the 8th ACM SIGSAC Symposium on Information, Computer and Communications Security, ACM, 2013, pp.\u00a025\u201336.","DOI":"10.1145\/2484313.2484317"},{"key":"ref030","unstructured":"T.\u00a0Harada, T.\u00a0Horie and K.\u00a0Tanaka, Task oriented management obviates your onus on Linux, in: Linux Conference, 2004."},{"key":"ref031","unstructured":"IDC, Smartphones expected to grow 32.7% in 2013 fueled by declining prices and string emerging market demand, according to IDC, June 2013, http:\/\/www.idc.com\/getdoc.jsp?containerId=prUS24143513."},{"key":"ref032","doi-asserted-by":"crossref","unstructured":"T.\u00a0Jaeger, Reference monitor, in: Encyclopedia of Cryptography and Security, 2nd edn, 2011, pp.\u00a01038\u20131040.","DOI":"10.1007\/978-1-4419-5906-5_646"},{"key":"ref033","doi-asserted-by":"crossref","unstructured":"J.\u00a0Jeon, K.K.\u00a0Micinski, J.A.\u00a0Vaughan, A.\u00a0Fogel, N.\u00a0Reddy, J.S.\u00a0Foster and T.\u00a0Millstein, Dr. Android and Mr. Hide: Fine-grained permissions in Android applications, in: Proceedings of the Second ACM Workshop on Security and Privacy in Smartphones and Mobile Devices, ACM, 2012, pp.\u00a03\u201314. doi:10.1145\/2381934.2381938.","DOI":"10.1145\/2381934.2381938"},{"key":"ref034","doi-asserted-by":"crossref","unstructured":"N.\u00a0Li, Q.\u00a0Wang, W.\u00a0Qardaji, E.\u00a0Bertino, P.\u00a0Rao, J.\u00a0Lobo and D.\u00a0Lin, Access control policy combining: Theory meets practice, in: Proceedings of the 14th ACM Symposium on Access Control Models and Technologies, ACM, 2009, pp.\u00a0135\u2013144. doi:10.1145\/1542207.1542229.","DOI":"10.1145\/1542207.1542229"},{"key":"ref035","doi-asserted-by":"crossref","unstructured":"D.\u00a0Muthukumaran, T.\u00a0Jaeger and V.\u00a0Ganapathy, Leveraing \u2018choice\u2019 in authorization hook placement, in: 19th ACM Conference on Computer and Commumications Security, 2012.","DOI":"10.1145\/2382196.2382215"},{"key":"ref036","doi-asserted-by":"crossref","unstructured":"M.\u00a0Nauman, S.\u00a0Khan and X.\u00a0Zhang, Apex: Extending android permission model and enforcement with user-defined runtime constraints, in: Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security, ACM, 2010, pp.\u00a0328\u2013332.","DOI":"10.1145\/1755688.1755732"},{"key":"ref037","unstructured":"OASIS, Extensible access control markup language (XACML) version 3.0, OASIS standard, http:\/\/docs.oasis-open.org\/xacml\/3.0\/xacml-3.0-core-spec-os-en.html."},{"key":"ref038","doi-asserted-by":"crossref","unstructured":"M.\u00a0Ongtang, S.\u00a0McLaughlin, W.\u00a0Enck and P.\u00a0McDaniel, Semantically rich application-centric security in Android, in: Annual Computer Security Applications Conference, ACSAC\u201909, IEEE, 2009, p.\u00a0340\u2013349.","DOI":"10.1109\/ACSAC.2009.39"},{"key":"ref039","doi-asserted-by":"publisher","DOI":"10.1002\/sec.360"},{"key":"ref040","unstructured":"N.\u00a0Reddy, J.\u00a0Jeon, J.\u00a0Vaughan, T.\u00a0Millstein and J.\u00a0Foster, Application-centric security policies on unmodified Android, Technical Report 110017, UCLA Computer Science Department."},{"key":"ref041","unstructured":"Security alert, New rootsmart Android malware utilizes the GingerBreak root exploit, http:\/\/www.csc.ncsu.edu\/faculty\/jiang\/RootSmart\/."},{"key":"ref042","unstructured":"Security alert, New Android malware \u2013 dkfbootkit \u2013 moves towards the first android bootkit, http:\/\/www.csc.ncsu.edu\/faculty\/jiang\/DKFBootKit\/."},{"key":"ref043","doi-asserted-by":"crossref","unstructured":"P.J.\u00a0Sheehan, B.\u00a0Davis and H.\u00a0Chen, Rewriting an Android app using retroskeleton, in: Proceedings of the 11th Annual International Conference on Mobile Systems, Applications, and Services, ACM, 2013, pp.\u00a0483\u2013484. doi:10.1145\/2462456.2465738.","DOI":"10.1145\/2462456.2465738"},{"key":"ref044","unstructured":"S.\u00a0Smalley and R.\u00a0Craig, Security Enhanced (SE) Android: Bringing flexible MAC to Android, in: NDSS, 2013."},{"key":"ref045","first-page":"43","volume":"1","author":"Smalley S.","year":"2001","journal-title":"NAI Labs Report"},{"key":"ref046","unstructured":"C.\u00a0Wright, C.\u00a0Cowan, S.\u00a0Smalley, J.\u00a0Morris and G.\u00a0Kroah-Hartman, Linux security modules: General security support for the Linux kernel, in: Proceedings of the 11th USENIX Security Symposium, Vol.\u00a05, San Francisco, CA, 2002."},{"key":"ref047","unstructured":"R.\u00a0Xu, H.\u00a0Sa\u00efdi and R.\u00a0Anderson, Aurasium: Practical policy enforcement for android applications, in: Proceedings of the 21st USENIX Security Symposium, 2012."},{"key":"ref048","doi-asserted-by":"crossref","unstructured":"X.\u00a0Zhou, S.\u00a0Demetriou, D.\u00a0He, M.\u00a0Naveed, X.\u00a0Pan, X.\u00a0Wang, C.A.\u00a0Gunter and K.\u00a0Nahrstedt, Identity, location, disease and more: Inferring your secrets from Android public resources, in: Proceedings of the ACM Conference on Computer and Communications Security, 2013.","DOI":"10.1145\/2508859.2516661"},{"key":"ref049","doi-asserted-by":"crossref","unstructured":"X.\u00a0Zhou, Y.\u00a0Lee, N.\u00a0Zhang, M.\u00a0Naveed and X.\u00a0Wang, The peril of fragmentation: Security hazards in Android device driver customizations, in: Proceedings of the IEEE Symposium on Security and Privacy, IEEE, 2014.","DOI":"10.1109\/SP.2014.33"},{"key":"ref050","doi-asserted-by":"crossref","unstructured":"Y.\u00a0Zhou and X.\u00a0Jiang, Dissecting Android malware: Characterization and evolution, in: Proceedings of the 33rd IEEE Symposium on Security and Privacy (Oakland 2012), San Francisco, CA, 2012.","DOI":"10.1109\/SP.2012.16"},{"key":"ref051","doi-asserted-by":"crossref","unstructured":"Y.\u00a0Zhou, X.\u00a0Zhang, X.\u00a0Jiang and V.\u00a0Freeh, Taming information-stealing smartphone applications (on Android), in: Trust and Trustworthy Computing, 2011, pp.\u00a093\u2013107. doi:10.1007\/978-3-642-21599-5_7.","DOI":"10.1007\/978-3-642-21599-5_7"},{"key":"ref052","unstructured":"Zimperlich sources, http:\/\/c-skills.blogspot.com\/2011\/02\/zimperlich-sources.html."}],"container-title":["Journal of Computer Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/journals.sagepub.com\/doi\/pdf\/10.3233\/JCS-160552","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/journals.sagepub.com\/doi\/full-xml\/10.3233\/JCS-160552","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/journals.sagepub.com\/doi\/pdf\/10.3233\/JCS-160552","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T20:44:59Z","timestamp":1777495499000},"score":1,"resource":{"primary":{"URL":"https:\/\/journals.sagepub.com\/doi\/10.3233\/JCS-160552"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,5,31]]},"references-count":52,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2016,8,16]]}},"alternative-id":["10.3233\/JCS-160552"],"URL":"https:\/\/doi.org\/10.3233\/jcs-160552","relation":{},"ISSN":["0926-227X","1875-8924"],"issn-type":[{"value":"0926-227X","type":"print"},{"value":"1875-8924","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,5,31]]}}}