DARPA has selected Galois, Inc for a Phase 1 project to develop software tools to enforce inter-application security on the Android operating system. The goal of the project is to prevent untrusted applications from accessing sensitive data or capabilities (such as GPS), whether directly, or through intermediary applications on a device.
The proposed tools will address two classes of security threats to mobile devices:
- execution of dangerous code; and
- inter-application information flows that violate privacy or confidentiality.
This project builds on Galois’ expertise in static analysis and information flow analysis, conducted under the Evaluator Tools and Program Analysis research programs.
For more information contact lead investigator, Dr. Joe Hurd.