The design of graph-based privacy protection mechanisms for mobile systems

In the range of mobile privacy, there are many attack methods which can reveal the user’s private information. The attacker can use the communication between applications to violate permissions and access the private information without the user’s authorization. Therefore, many researchers focus on privilege escalation. However, the attacker can increase their knowledge about the user without achieving privilege escalation through various inference techniques. For this reason, we extend the concept of privilege escalation attack to a more general information escalation attack, and propose a privacy protection mechanism based on the inference-graph.