Abstract

With the popularity of Android smart phones everyone finds it convenient to make transactions through these smart phones. And the users of these smart phones, in most cases unaware of different types of threats. The purpose for this survey paper is to conduct a survey on users to get the information about the security vulnerabilities they are creating unknowingly, bringing forward some security frameworks for these threats & giving a basic knowledge to the new comer to the android about android OS architecture and the threats to this architecture.

References

• http://news.bbc.co.uk/2/hi/technology/7266201.stm
• Choosilp, Wichien, and Yujian Fu. "A Case STUDY OF MALWARE DETECTION AND REMOVAL IN ANDROID APPS."
• http://blog.trendmicro.com/trendlabs-security-intelligence/the-hidden-dangers-in-third-party-app-sites
• Tse, Daniel, X. Liu, Christopher Nusaputra, B. Hu, Y. Wang, and M. W. Xing. "STRATEGIES IN IMPROVING ANDROID SECURITY." (2014)
• www.acumin.co.uk
• http://www.konsultek.com/10/cyber-attacks-2/fireeye-discovers-emails-carrying-malware-in-android-devices
• Fuchs, Adam P., Avik Chaudhuri, and Jeffrey S. Foster. "Scandroid: Automated security certification of android applications." Manuscript, Univ. of Maryland, http://www. cs. umd. edu/avik/projects/scandroidascaa 2, no. 3 (2009).
• Ongtang, Machigar, Stephen McLaughlin, William Enck, and Patrick McDaniel. "Semantically rich application‐centric security in Android."Security and Communication Networks 5, no. 6 (2012): 658-673.
• Barrera, David, H. Güneş Kayacik, Paul C. van Oorschot, and Anil Somayaji. "A methodology for empirical analysis of permission-based security models and its application to android." In Proceedings of the 17th ACM conference on Computer and communications security, pp. 73-84. ACM, 2010.
• Felt, Adrienne Porter, Erika Chin, Steve Hanna, Dawn Song, and David Wagner. "Android permissions demystified." In Proceedings of the 18th ACM conference on Computer and communications security, pp. 627-638. ACM, 2011.
• Marforio, Claudio, and Aurélien Francillon. Application collusion attack on the permission-based security model and its implications for modern smartphone systems. Department of Computer Science, ETH Zurich, 2011.
• Powar, Swapnil, and B. B. Meshram. "Survey on Android Security Framework." International Journal of Engineering Research and Applications3, no. 2 (2013): 907-911.
• Gibler, Clint, Jonathan Crussell, Jeremy Erickson, and Hao Chen.AndroidLeaks: automatically detecting potential privacy leaks in android applications on a large scale. Springer Berlin Heidelberg, 2012.
• Conti, Mauro, Vu Thien Nga Nguyen, and Bruno Crispo. "CRePE: Context-related policy enforcement for Android." In Information Security, pp. 331-345. Springer Berlin Heidelberg, 2011.
• Enck, William, Peter Gilbert, Seungyeop Han, Vasant Tendulkar, Byung-Gon Chun, Landon P. Cox, Jaeyeon Jung, Patrick McDaniel, and Anmol N. Sheth. "TaintDroid: an information-flow tracking system for realtime privacy monitoring on smartphones." ACM Transactions on Computer Systems (TOCS) 32, no. 2 (2014): 5.
• Enck, William, Machigar Ongtang, and Patrick McDaniel. "On lightweight mobile phone application certification." In Proceedings of the 16th ACM conference on Computer and communications security, pp. 235-245. ACM, 2009.
• Ho, Tsung-Hsuan, Daniel Dean, Xiaohui Gu, and William Enck. "PREC: practical root exploit containment for android devices." In Proceedings of the 4th ACM conference on Data and application security and privacy, pp. 187-198. ACM, 2014.
• Nauman, Mohammad, Sohail Khan, and Xinwen Zhang. "Apex: extending android permission model and enforcement with user-defined runtime constraints." In Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security, pp. 328-332. ACM, 2010.
• Burguera, Iker, Urko Zurutuza, and Simin Nadjm-Tehrani. "Crowdroid: behavior-based malware detection system for android." In Proceedings of the 1st ACM workshop on Security and privacy in smartphones and mobile devices, pp. 15-26. ACM, 2011.
• Shabtai, Asaf, Uri Kanonov, Yuval Elovici, Chanan Glezer, and Yael Weiss. "“Andromaly”: a behavioral malware detection framework for android devices." Journal of Intelligent Information Systems 38, no. 1 (2012): 161-190.
• Dini, Gianluca, Fabio Martinelli, Andrea Saracino, and Daniele Sgandurra. "MADAM: A Multi-level Anomaly Detector for Android Malware." In MMM-ACNS, vol. 12, pp. 240-253. 2012.
• Schmidt, Aubrey-Derrick, Rainer Bye, Hans-Gunther Schmidt, Jan Clausen, Osman Kiraz, Kamer Yüksel, Seyit Camtepe, and Sahin Albayrak. "Static analysis of executables for collaborative malware detection on android." InCommunications, 2009. ICC'09. IEEE International Conference on, pp. 1-5. IEEE, 2009.
• Tesfay, Welderufael Berhane, Todd Booth, and Karl Andersson. "Reputation based security model for android applications." In Trust, Security and Privacy in Computing and Communications (TrustCom), 2012 IEEE 11th International Conference on, pp. 896-901. IEEE, 2012.