Uma Solução para Avaliação de Riscos em Aplicativos para Dispositivos Móveis

Abstract

Following the technological evolution of mobile systems, a set of facilities and computing resources available on a large scale users, who can now use their devices for data storage as a resource for global location, access to social networks and many other applications. However, these demands should be justified based on a basic premise: the use of a secure platform, which makes possible the reduction of risks in the loss of integrity, availability or reliability of the information of its users. These days, the occurrence of a security incident on a smartphone mobile, tablet or mobile phone, can be aggravated by the great connectivity and processing offered by these devices. The restoration or maintenance of compromised data, after a security flaw, it is an expensive procedure and often does not bring the expected benefit. An alternative to reducing this type of disorder is the adoption of proactive measures, aimed at maintaining and implementing methods to increase safety levels in mobile systems. As a way to contain the security problems, linked by attempts of unauthorized access and indiscriminate use of Apps, this paper proposes the study and creation of a methodology for hazard analysis in applications developed exclusively for Android, which is considered the main platform for mobile devices available on the market. As a result, the availability we seek a solution to identify the aggregate risk the installation or maintenance of certain applications installed on your mobile device. The aim is to also identify malicious intent of such software, such as the requirement of abusive permissions, not necessary for the operation of the application. This work has results, among which we mention: a detailed study of patterns permissions for Android applications and an assessment of potential aggregate risks to each of these, the creation and validation of a new risk analysis model and implementation of an application to automate the model created.