Using static analysis for automatic assessment and mitigation of unwanted and malicious activities within Android applications

In the last decade, smartphones have gained widespread usage. Since the advent of online application stores, hundreds of thousands of applications have become instantly available to millions of smart-phone users. Within the Android ecosystem, application security is governed by digital signatures and a list of coarse-grained permissions. However, this mechanism is not fine-grained enough to provide the user with a sufficient means of control of the applications' activities. Abuse of highly sensible private information such as phone numbers without users' notice is the result. We show that there is a high frequency of privacy leaks even among widely popular applications. Together with the fact that the majority of the users are not proficient in computer security, this presents a challenge to the engineers developing security solutions for the platform. Our contribution is twofold: first, we propose a service which is able to assess Android Market applications via static analysis and provide detailed, but readable reports to the user. Second, we describe a means to mitigate security and privacy threats by automated reverse-engineering and refactoring binary application packages according to the users' security preferences.

A trusted ecosystem for Android applications based on context-aware access control

Private data stored on smartphones is a precious target for malware attacks. A constantly changing environment, e.g. switching network connections, can cause unpredictable threats, and require an adaptive approach to access control. Context-based access control is using dynamic environmental information, including it into access decisions. We propose an "ecosystem-in-an-ecosystem" which acts as a secure container for trusted software aiming at enterprise scenarios where users are allowed to use private devices. We have implemented a proof-of-concept prototype for an access control framework that processes changes to low-level sensors and semantically enriches them, adapting access control policies to the current context. This allows the user or the administrator to maintain fine-grained control over resource usage by compliant applications. Hence, resources local to the trusted container remain under control of the enterprise policy. Our results show that context-based access control can be done on smartphones without major performance impact.

Developing and benchmarking native Linux applications on Android

Smartphones get increasingly popular where more and more smartphone platforms emerge. Special attention was gained by the open source platform Android which was presented by the Open Handset Alliance (OHA) hosting members like Google, Motorola, and HTC. Android uses a Linux kernel and a stripped-down userland with a custom Java VM set on top. The resulting system joins the advantages of both environments, while third-parties are intended to develop only Java applications at the moment. In this work, we present the benefit of using native applications in Android. Android includes a fully functional Linux, and using it for heavy computational tasks when developing applications can bring in substantional performance increase. We present how to develop native applications and software components, as well as how to let Linux applications and components communicate with Java programs. Additionally, we present performance measurements of native and Java applications executing identical tasks. The results show that native C applications can be up to 30 times as fast as an identical algorithm running in Dalvik VM. Java applications can become a speed-up of up to 10 times if utilizing JNI.

Monitoring android for collaborative anomaly detection : a first architectural draft

Our daily lives become more and more dependent upon smartphones due to their increased capabilities. Smartphones are used in various ways, e.g. for payment systems or assisting the lives of elderly or disabled people. Security threats for these devices become more and more dangerous since there is still a lack of proper security tools for protection. Android emerges as an open smartphone platform which allows modification even on operating system level and where third-party developers first time have the opportunity to develop kernel-based low-level security tools. Android quickly gained its popularity among smartphone developers and even beyond since it bases on Java on top of "open" Linux in comparison to former proprietary platforms which have very restrictive SDKs and corresponding APIs. Symbian OS, holding the greatest market share among all smartphone OSs, was even closing critical APIs to common developers and introduced application certification. This was done since this OS was the main target for smartphone malwares in the past. In fact, more than 290 malwares designed for Symbian OS appeared from July 2004 to July 2008. Android, in turn, promises to be completely open source. Together with the Linux-based smartphone OS OpenMoko, open smartphone platforms may attract malware writers for creating malicious applications endangering the critical smartphone applications and owners privacy. Since signature-based approaches mainly detect known malwares, anomaly-based approaches can be a valuable addition to these systems. They base on mathematical algorithms processing data that describe the state of a certain device. For gaining this data, a monitoring client is needed that has to extract usable information (features) from the monitored system. Our approach follows a dual system for analyzing these features. On the one hand, functionality for on-device light-weight detection is provided. But since most algorithms are resource exhaustive, remote feature analysis is provided on the other hand. Having this dual system enables event-based detection that can react to the current detection need. In our ongoing research we aim to investigates the feasibility of light-weight on-device detection for certain occasions. On other occasions, whenever significant changes are detected on the device, the system can trigger remote detection with heavy-weight algorithms for better detection results. In the absence of the server respectively as a supplementary approach, we also consider a collaborative scenario. Here, mobile devices sharing a common objective are enabled by a collaboration module to share information, such as intrusion detection data and results. This is based on an ad-hoc network mode that can be provided by a WiFi or Bluetooth adapter nearly every smartphone possesses.

Google Android : a comprehensive introduction

Google Android, Google's new product and its first attempt to enter the mobile market, might have an equal impact on mobile users like Apple's hyped product, the iPhone. In this Technical report we are going to present the Google Android platform, what Android is, describe why it might be considered as a worthy rival to Apple's iPhone. We will describe parts of its internals, take a look "under the hood" while explaining components of the underlying operating system. We will show how to develop applications for this platform, which difficulties a developer might have to face, and how developers can possibly use other programming languages to develop for Android than the propagated language Java.

Principles of motor learning in ecological dynamics : a comment on functions of learning and the acquisition of motor skills (with reference to sport)

This paper provides a commentary on the contribution by Dr Chow who questioned whether the functions of learning are general across all categories of tasks or whether there are some task-particular aspects to the functions of learning in relation to task type. Specifically, they queried whether principles and practice for the acquisition of sport skills are different than what they are for musical, industrial, military and human factors skills. In this commentary we argue that ecological dynamics contains general principles of motor learning that can be instantiated in specific performance contexts to underpin learning design. In this proposal, we highlight the importance of conducting skill acquisition research in sport, rather than relying on empirical outcomes of research from a variety of different performance contexts. Here we discuss how task constraints of different performance contexts (sport, industry, military, music) provide different specific information sources that individuals use to couple their actions when performing and acquiring skills. We conclude by suggesting that his relationship between performance task constraints and learning processes might help explain the traditional emphasis on performance curves and performance outcomes to infer motor learning.

The need for ‘representative task design’ in evaluating efficacy of skills tests in sport : a comment on Russell, Benton and Kingsley (2010)

Russell, Benton and Kingsley (2010) recently suggested a new association football test comprising three different tasks for the evaluation of players' passing, dribbling and shooting skills. Their stated intention was to enhance ‘ecological validity’ of current association football skills tests allowing generalisation of results from the new protocols to performance constraints that were ‘representative’ of experiences during competitive game situations. However, in this comment we raise some concerns with their use of the term ‘ecological validity’ to allude to aspects of ‘representative task design’. We propose that in their paper the authors confused understanding of environmental properties, performance achievement and generalisability of the test and its outcomes. Here, we argue that the tests designed by Russell and colleagues did not include critical sources of environmental information, such as the active role of opponents, which players typically use to organise their actions during performance. Static tasks which are not representative of the competitive performance environment may lead to different emerging patterns of movement organisation and performance outcomes, failing to effectively evaluate skills performance in sport.

Sport biomechanics

Biomechanics involves research and analysis of the mechanisms of living organisms. This can be conducted on multiple levels and represents a continuum from the molecular, wherein biomaterials such as collagen and elastin are considered, to the tissue, organ and whole body level. Some simple applications of Newtonian mechanics can supply correct approximations on each level, but precise details demand the use of continuum mechanics. Sport biomechanics uses the scientific methods of mechanics to study the effects of forces on the sports performer and considers aspects of the behaviour of sports implements, equipment, footwear and surfaces. There are two main aims of sport biomechanics, that is, the reduction of injury and the improvement of performance (Bartlett, 1999). Aristotle (384-322 BC) wrote the first book on biomechanics, De Motu Animalium, translated as On the Movement of Animals. He saw animals' bodies as mechanical systems, but also pursued questions that might explain the physiological difference between imagining the performance of an action and actually doing it. Some simple examples of biomechanics research include the investigation of the forces that act on limbs, the aerodynamics of animals in flight, the hydrodynamics of objects moving through water and locomotion in general across all forms of life, from individual cells to whole organisms...

Fan activism on Twitter: online sport fandom communities and the campaign #ForaRicardoTeixeira [Fã-ativismo no Twitter: comunidades online de fãs de esporte e a campanha #ForaRicardoTeixeira]

This paper approaches a particular type of fandom practice, what I am calling fan activism. Fan activism is a topic that has historically received little attention in the fandom studies area. Here, I analyse the #ForaRicardoTeixeira campaign from a sample of 15,000 tweets posted at the time of his re¬signation from CBF. This paper combines quantitative and qualitative methods to investigate a) the com¬munity dynamics and b) the content of the conversations. The dynamics analysis pointed out, for instance, patterns of users and information sources, and the content analysis revealed how users framed the case. Future implications of the results for the study of online sport fandom practices are discussed at last.

An ecological dynamics approach to skill acquisition : implications for development of talent in sport.

This paper proposes how ecological dynamics, a theory focusing on the performer-environment relationship, provides a basis for understanding skill acquisition in sport. From this perspective, learners are conceptualized as complex, neurobiological systems in which inherent self-organisation tendencies support the emergence of adaptive behaviours under a range of interacting task and environmental constraints. Intentions, perceptions and actions are viewed as intertwined processes which underpin functional movement solutions assembled by each learner during skill acquisition. These ideas suggest that skill acquisition programmes need to sample information from the performance environment to guide behaviour in practice tasks. Skill acquisition task protocols should allow performers to use movement variability to explore and create opportunities for action, rather than constraining them to passively receiving information. This conceptualisation also needs to characterize the design of talent evaluation tests, which need to faithfully represent the perception-action relationships in the performance environment. Since the dynamic nature of changing task constraints in sports cannot be predicted over longer timescales, an implication is that talent programmes should focus on developing performance expertise in each individual, rather than over-relying on identification of expert performers at specific points in time.

Do employees care about their relative income position? Behavioral evidence focusing on performance in professional team sport

Objective Do employees care about their relative (economic) position in comparison to their co-workers in an organization? And if so, does it raise or lower their performance? While the topic is widely discussed in the literature, behavioral evidence on these important questions is relatively rare. Methods This article explores the pay-performance relationship using a sports data set. The strength of analyzing such data is that sports tournaments take place in a very controlled environment that helps to isolate a relative income effect. Results Using two large unique data sets that cover 26 seasons in basketball and eight seasons in soccer (Bundesliga), we find considerable support for the idea that a relative income disadvantage is correlated with a decrease in individual performance. In addition, there does not seem to be any tolerance for income disparity based on the hope that such differences may signal that better times are ahead. Conclusions This suggests the need to consider the impact of the relative income position when designing pay-for-performance mechanisms within firms and teams.

Overview of complex systems in sport

The complex systems approach offers an opportunity to replace the extant pre-dominant mechanistic view on sport-related phenomena. The emphasis on the environment-system relationship, the applications of complexity principles, and the use of nonlinear dynamics mathematical tools propose a deep change in sport science. Coordination dynamics, ecological dynamics, and network approaches have been successfully applied to the study of different sport-related behaviors, from movement patterns that emerge at different scales constrained by specific sport contexts to game dynamics. Sport benefit from the use of such approaches in the understanding of technical, tactical, or physical conditioning aspects which change their meaning and dilute their frontiers. The creation of new learning and training strategies for teams and individual athletes is a main practical consequence. Some challenges for the future are investigating the influence of key control parameters in the nonlinear behavior of athlete-environment systems and the possible relatedness of the dynamics and constraints acting at different spatio-temporal scales in team sports. Modelling sport-related phenomena can make useful contributions to a better understanding of complex systems and vice-versa.