Taming transitive permission attack via bytecode rewriting on Android application

Google Android is popular for mobile devices in recent years. The openness and popularity of Android make it a primary target for malware. Even though Android's security mechanisms could defend most malware, its permission model is vulnerable to transitive permission attack, a type of privilege escalation attacks. Many approaches have been proposed to detect this attack by modifying the Android OS. However, the Android's fragmentation problem and requiring rooting Android device hinder those approaches large-scale adoption. In this paper, we present an instrumentation framework, called SEAPP, for Android applications (or “apps”) to detect the transitive permission attack on unmodified Android. SEAPP automatically rewrites an app without requiring its source codes and produces a security-harden app. At runtime, call-chains are built among these apps and detection process is executed before a privileged API is invoked. Our experimental results show that SEAPP could work on a large number of benign apps from the official Android market and malicious apps, with a repackaged success rate of over 99.8%. We also show that our framework effectively tracks call-chains among apps and detects known transitive permission attack with low overhead. Copyright © 2016 John Wiley & Sons, Ltd.

Valutazione dell'influenza della segnaletica temporanea di cantiere sulla sicurezza stradale mediante Mobile Eye Detector

Analisi sperimentale svolta per valutare come la segnaletica di cantiere, se percepita correttamente, influenza la guida degli utenti che circolano sulla strada interessata da lavorazioni di tipo cantieristico. L'analisi si prefigge anche lo scopo di trovare le soluzioni necessarie per garantire il livello di sicurezza più alto possibile sia per gli utenti che si ritrovano a stretto contatto con il cantiere, che per lavoratori che vi operano.

Implementazione e analisi di algoritmi dinamici per trasmissione MPEG-DASH su client Android

Attualmente, la maggior parte dei dati che transitano sulla rete appartiene a contenuti multimediali. Più nello specifico, è lo Streaming Video ad avere la predominanza nella condivisione di Internet; vista la crescita che tale servizio ha subìto negli ultimi anni, si sono susseguiti diversi studi volti allo sviluppo di tecniche e metodologie che potessero migliorarlo. Una di queste è sicuramente l'Adaptive Video Streaming, tecnica utilizzata per garantire all'utente una buona Quality of Experience (QoE) mediante l'utilizzo dei cosiddetti "algoritmi di rate adaptation". Il lavoro svolto in questi studi si è voluto concentrare su due filoni distinti, ma allo stesso tempo confrontabili: la prima parte della tesi riguarda lo sviluppo e l'analisi di alcuni algoritmi di rate adaptation per DASH, mentre la seconda è relativa all'implementazione di un nuovo algoritmo che li possa affiancare, migliorando la QoE nel monitorare lo stato della connessione. Si è quindi dovuta implementare un'applicazione Android per lo streaming video, che fosse conforme allo standard MPEG-DASH e potesse fornire le informazioni di testing da utilizzare per le analisi. La tesi è suddivisa in quattro capitoli: il primo introduce l'argomento e definisce la terminologia necessaria alla comprensione degli studi; il secondo descrive alcuni dei lavori correlati allo streaming adattivo e introduce i due filoni principali della tesi, ovvero gli algoritmi di rate adaptation e la proposta di algoritmo per la selezione dinamica del segmento; il terzo presenta l'app SSDash, utilizzata come mezzo per le analisi sperimentali; infine, il quarto ed ultimo capitolo mostra i risultati delle analisi e le corrispondenti valutazioni.

Un sistema di geolocalizzazione basato su geomagnetismo

La geolocalizzazione è l’insieme di metodi e tecniche che permette di mettere in relazione una certa informazione con un punto specifico della superficie terrestre. Il punto è generalmente indicato in maniera assoluta tramite coordinate latitudinali e longitudinali, oppure in maniera relativa ad altri punti noti. Nello specifico il concetto di geolocalizzazione enfatizza l’aspetto dinamico, riferendosi ad informazioni in tempo reale relative alla posizione, direzione e velocità del soggetto analizzato, e la conseguente analisi di percorso e comportamento. Tutto questo rende possibile la realizzazione di un sistema di localizzazione efficiente. La geolocalizzazione è considerata tra i più rivoluzionari campi di sviluppo in ambito sociale ed economico, pur avendo potenziali problemi legati alla privacy e libertà individuale di non semplice soluzione. In particolare è di interesse di ricerca e in ambito di commercio trovare un sistema di localizzazione adeguato non solo per l’esterno ma anche per situazioni indoor. In questa tesi verranno analizzati i vari metodi di posizionamento fino ad oggi studiati, sia indoor che outdoor per arrivare a proporre un sistema di localizzazione indoor basato su geomagnetismo dell’ambiente. Nel primo capitolo il documento presenta una riflessione storica sull’evoluzione del concetto di localizzazione, partendo dai primi tentativi di navigazione, fino ad arrivare ai più moderni sistemi tecnologici. Vedremo quindi nello specifico quali sono gli ultimi studi e tecnologie per un sistema di localizzazione indoor, concentrandosi sull’analisi dei vantaggi offerti da nuovi dispositivi con gli smartphones. Infine verrà descritto nel dettaglio il lavoro effettuato per la realizzazione di un prototipo di sistema di localizzazione indoor basato su geomagnetismo in sede aziendale GetConnected, dove si è svolta l’attività di tesi, e presso un grosso centro commerciale come caso d’uso pratico.

La enseñanza Bilingüe de la Paleontología en la Universidad Complutense de Madrid. Aplicación android de ayuda para el estudiante

Memoria del Proyecto de Innovación Educativa PIMCD2015-78

Development of a framework to create plugins in Android Apps

The present work aims to allow developers to implement small features on a certain Android application in a fast and easy manner, as well as provide their users to install them ondemand, i.e., they can install the ones they are interested in. These small packages of features are called plugins, and the chosen development language to develop these in was JavaScript. In order to achieve that, an Android framework was developed that enables the host application to install, manage and run these plugins at runtime. This framework was designed to have a very clean and almost readable API, which allowed for better code organization and maintainability. The implementation used the Google’s engine “V8” to interpret the JavaScript code and through a set of JNI calls made that code call certain Android methods previously registered in the runtime. In order to test the framework, it was integrated with the client’s communication application RCS+ using two plugins developed alongside the framework. Although these plugins had only the more common requirements, they were proven to work successfully as intended. Concluding, the framework although successful made it clear that this kind of development through a non-native API has its set of difficulties especially regarding the implementation of complex features.

Aplicativos Android para agricultura: benefícios do desenvolvimento em parceria com o usuário.

RESUMO - Com a popularização de tablets e smartphones e as peculiaridades do desenvolvimento de aplicativos para esses dispositivos, surge a necessidade de adaptar os métodos de avaliação de usabilidade para resultados mais precisos. Este trabalho propõe o método Coldemob para validação de interfaces de aplicativos móveis com a participação de representantes do usuário final, com uma etapa presencial e uma etapa remota após o lançamento do aplicativo, detalhando a aplicação da segunda etapa. O método foi testado com um aplicativo do domínio agrícola e os resultados mostraram que ao incluir o usuário no processo de construção do aplicativo, a compreensão dos desenvolvedores acerca do domínio aumentou. A etapa remota se mostrou complementar à presencial, possibilitando um maior número de problemas identificados.

Ethnic differences in body composition and anthropometric characteristics in Australian Caucasian and urban Indigenous children

The objective was to compare ethnic differences in anthropometry, including size, proportions and fat distribution, and body composition in a cohort of seventy Caucasian (forty-four boys, twenty-six girls) and seventy-four urban Indigenous (thirty-six boys, thirty-eight girls) children (aged 9–15 years). Anthropometric measures (stature, body mass, eight skinfolds, thirteen girths, six bone lengths and five bone breadths) and body composition assessment using dual-energy X-ray absorptiometry were conducted. Body composition variables including total body fat percentage and percentage abdominal fat were determined and together with anthropometric indices, including BMI (kg/m2), abdominal:height ratio (AHtR) and sum of skinfolds, ethnic differences were compared for each sex. After adjustment for age, Indigenous girls showed significantly (P < 0·05) greater trunk circumferences and proportion of overweight and obesity than their Caucasian counterparts. In addition, Indigenous children had a significantly greater proportion (P < 0·05) of trunk fat. The best model for total and android fat prediction included sum of skinfolds and age in both sexes (>93 % of variation). Ethnicity was only important in girls where abdominal circumference and AHtR were included and Indigenous girls showed significantly (P < 0·05) smaller total/android fat deposition than Caucasian girls at the given abdominal circumference or AHtR values. Differences in anthropometric and fat distribution patterns in Caucasian and Indigenous children may justify the need for more appropriate screening criteria for obesity in Australian children relevant to ethnic origin.

Mastering medical terminology online workbook

Key Features: "Aligns to Mastering Medical Terminology: Australia and New Zealand. Self-test to practise and revise combining forms, word roots, prefixes and suffixes. Crossword puzzles, anagrams and label-the-diagram exercises Also available iOS/Android app featuring audio glossary, flashcards and MCQs."--publisher website

Community engagement for disaster resilience : flood risk management in Jakarta, Indonesia

Understanding dynamics of interactions between community groups and government agencies is crucial to improve community resilience for flood risk reduction through effective community engagement strategies. Overall, a variety of approaches are available, however they are limited in their application. Based on research of a case study in Kampung Melayu Village in Jakarta, further complexity in engaging community emerges in planning policy which requires the relocation of households living in floodplains. This complexity arises in decision-making processes due to barriers to communication. This obstacle highlights the need for a simplified approach for an effective flood risk management which will be further explored in this paper. Qualitative analyses will be undertaken following semi-structured interviews conducted with key actors within government agencies, non-governmental organisations (NGOs), and representatives of communities. The analyses involve investigation of barriers and constraints on community engagement in flood risk management, particularly relevant to collaboration mechanism, perception of risk, and technical literacy to flood risk. These analyses result in potential redirection of community consultation strategies to lead to a more effective collaboration among stakeholders in the decision-making processes. As a result, greater effectiveness in plan implementation of flood risk management potentially improves disaster resilience in the future.

EnergyWiz

EnergyWiz is an Android smart phone application that was developed through a theory-driven design approach. Along with other features EnergyWiz provides users with three types of social comparison – normative, one-on-one and ranking.

CheepSync: A Time Synchronization Service for Resource Constrained Bluetooth LE Advertisers

Clock synchronization is highly desirable in distributed systems, including many applications in the Internet of Things and Humans. It improves the efficiency, modularity, and scalability of the system, and optimizes use of event triggers. For IoTH, BLE - a subset of the recent Bluetooth v4.0 stack - provides a low-power and loosely coupled mechanism for sensor data collection with ubiquitous units (e.g., smartphones and tablets) carried by humans. This fundamental design paradigm of BLE is enabled by a range of broadcast advertising modes. While its operational benefits are numerous, the lack of a common time reference in the broadcast mode of BLE has been a fundamental limitation. This article presents and describes CheepSync, a time synchronization service for BLE advertisers, especially tailored for applications requiring high time precision on resource constrained BLE platforms. Designed on top of the existing Bluetooth v4.0 standard, the CheepSync framework utilizes low-level time-stamping and comprehensive error compensation mechanisms for overcoming uncertainties in message transmission, clock drift, and other system-specific constraints. CheepSync was implemented on custom designed nRF24Cheep beacon platforms (as broadcasters) and commercial off-the-shelf Android ported smartphones (as passive listeners). We demonstrate the efficacy of CheepSync by numerous empirical evaluations in a variety of experimental setups, and show that its average (single-hop) time synchronization accuracy is in the 10 mu s range.

3D geolokalizazioa androidetan

Karrera amaierako proiektu honetan telefono mugikor aurreratuentzako aplikazio grafiko bat garatu da. Aplikazioak mendizaleei lainoa dagoenean orientatzen lagundu nahi die, ikuspen ezagatik galdu ez daitezen. Hori lortzeko, erabiltzailearen inguruan dagoen paisaia hiru dimentsiotan pantailaratuko da. Non kokatuta dagoen jakiteko GPS sistema atzitzen da. Erabiltzaileak aurrera egiten duen heinean marraztutako ingurunea eguneratzen da. Orientatzen laguntzeko, begiratzen ari den norantzan dagoen lurrazala bakarrik marraztuko zaio mendizaleari.

Home-Automation System

Nuestro proyecto trata de obtener un sistema centralizado para el manejo y monitorización de un conjunto de aparatos eléctricos del hogar, tales como luces, cámaras, sensores, y otros aparatos mediante una aplicación para dispositivos móviles Android. También se facilita una herramienta web para administrar dichos aparatos. Nuestro sistema da soporte al manejo individual y manual de estos aparatos, por ejemplo encender una lámpara, así como la posibilidad de incluir programas que se ejecuten a una determinada hora, y con una determinada recurrencia. Por ejemplo, se puede programar el encendido de una luz todos los días a las 20:00. Además, también se pueden crear reglas que, dado una determinada situación, realicen una serie de acciones. Por ejemplo, si se detecta que la luminosidad baja de cierto valor (detectado mediante un sensor de luz), se encienda una lámpara. Para conseguir esto se ha realizado una aplicación centralizada, a modo de servidor, que se comunica con los aparatos eléctricos mediante diferentes protocolos de comunicación, así como con el dispositivo móvil Android, y una aplicación web administrativa, a través de un portal de servicios web.

Reuse of software components orientated to iOS mobile devices

Within the next few pages, I will try to give a wide description of the project that I have been doing for IK4-Ikerlan. For the last six months, I have been working in developing a socket-based application for Apple devices. These devices work under the iOS operative system, which is programmed in Objective-C, a language similar to C. Although I did not have the chance to develop this application for Apple TV, I was able to create an application for iPhone and another one for iPad. The only difference between both applications was the screen resolution, but we decided to make them separately, as it would be really hard to combine both resolutions, and wallpapers, everything in the same workspace. Finally, it is necessary to add that the main goal was not to create a new application for iOS, but to translate an Android application into iOS. To achieve this, it is required to translate Java code into Objective- C, which is the language used to develop applications for all kinds of Apple devices. Fortunately, there is a tool created by Google, which helped us with this exercise. This tool is called j2ObjC, and it is still being developed.