BEGIN:VCALENDAR
PRODID;X-RICAL-TZSOURCE=TZINFO:-//Calagator//EN
CALSCALE:GREGORIAN
X-WR-CALNAME:Calagator
METHOD:PUBLISH
VERSION:2.0
BEGIN:VTIMEZONE
TZID;X-RICAL-TZSOURCE=TZINFO:America/Los_Angeles
BEGIN:DAYLIGHT
DTSTART:20120311T020000
RDATE:20120311T020000
TZOFFSETFROM:-0800
TZOFFSETTO:-0700
TZNAME:PDT
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
CREATED;VALUE=DATE-TIME:20120725T171413Z
DTEND;TZID=America/Los_Angeles;VALUE=DATE-TIME:20120802T113000
DTSTART;TZID=America/Los_Angeles;VALUE=DATE-TIME:20120802T103000
DTSTAMP;VALUE=DATE-TIME:20120725T171413Z
LAST-MODIFIED;VALUE=DATE-TIME:20120725T171413Z
UID:http://calagator.org/events/1250462652
DESCRIPTION:Presented by Iulian Neamtiu.&#13\;\n&#13\;\nThe relative nove
 lty and rapid evolution pace of the Android ecosystem (platform\, vendor
 -installed apps and third-party apps) means both the platform and apps r
 eceive little scrutiny. Hence there is a need for tools that assess\, mo
 nitor and verify all components of the Android ecosystem. This lack of t
 ools and scrutiny is particularly problematic when combined with the ope
 n nature of Google Play\, the main app distribution channel.&#13\;\n&#13
 \;\nIn the first part of this talk we will focus on multi-layer profilin
 g of Android apps using ProfileDroid\, a tool and framework we developed
  at UC Riverside. ProfileDroid is useful for a variety of Android app an
 alyses\, from performance to usability to security. ProfileDroid monitor
 s and correlates the behavior of an app at four layers: (a) static\, or 
 app specification (b) user interaction\, (c) operating system\, and (d) 
 network layer. Using ProfileDroid on 27 free and paid Android apps\, we 
 have revealed: (a) discrepancies between the app specification and app e
 xecution\, (b) free versions of apps could end up costing more than thei
 r paid counterparts\, due to an order of magnitude increase in traffic\,
  (c) most network traffic is not encrypted\, (d) apps communicate with m
 any more sources than users might expect.&#13\;\n&#13\;\nIn the second p
 art of the talk we will present results from our long-term permission ev
 olution study of the Android ecosystem---platform and 237 apps---over th
 ree years. We found that the platform has increased the number of danger
 ous permissions and does not move towards finer-grained permissions\, an
 d that app developers do not follow the principle of least privilege. We
  will also briefly discuss our efforts with static information flow trac
 king for Android apps\, as well as building a log-and-replay system for 
 Android.\n\nTags: security\, galois\, mobile\, android\, analysis\, tech
  talk\n\nImported from: http://calagator.org/events/1250462652
URL:http://corp.galois.com/blog/2012/7/25/tech-talk-comprehensive-analysi
 s-of-the-android-ecosystem.html
SUMMARY:Galois Tech Talk: Comprehensive Analysis of the Android Ecosystem
LOCATION:Galois\, Inc: 421 SW 6th Ave. Suite 300\, Portland OR 97204 US
SEQUENCE:1
END:VEVENT
END:VCALENDAR