ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware

Billions of users rely on the security of the Android platform to protect phones, tablets, and many different types of consumer electronics. While Android's permission model is well studied, the enforcement of the protection policy has received relatively little attention. Much of this enforcement is spread across system services, taking the form of hard-coded checks within their implementations. In this paper, we propose Authorization Check Miner (ACMiner), a framework for evaluating the correctness of Android's access control enforcement through consistency analysis of authorization checks. ACMiner combines program and text analysis techniques to generate a rich set of authorization checks, mines the corresponding protection policy for each service entry point, and uses association rule mining at a service granularity to identify inconsistencies that may correspond to vulnerabilities. We used ACMiner to study the AOSP version of Android 7.1.1 to identify 28 vulnerabilities relating to missing authorization checks. In doing so, we demonstrate ACMiner's ability to help domain experts process thousands of authorization checks scattered across millions of lines of code

2016-2017 Sanctuary Series - January 26, 2017

https://spiral.lynn.edu/sanctuary_series/1006/thumbnail.jp

Influence of macrofaunal assemblages and environmental heterogeneity on microphytobenthic production in experimental systems

Despite the complexity of natural systems, heterogeneity caused by the fragmentation of habitats has seldom been considered when investigating ecosystem processes. Empirical approaches that have included the influence of heterogeneity tend to be biased towards terrestrial habitats; yet marine systems offer opportunities by virtue of their relative ease of manipulation, rapid response times and the well-understood effects of macrofauna on sediment processes. Here, the influence of heterogeneity on microphytobenthic production in synthetic estuarine assemblages is examined. Heterogeneity was created by enriching patches of sediment with detrital algae (Enteromorpha intestinalis) to provide a source of allochthonous organic matter. A gradient of species density for four numerically dominant intertidal macrofauna (Hediste diversicolor, Hydrobia ulvae, Corophium volutator, Macoma balthica) was constructed, and microphytobenthic biomass at the sediment surface was measured. Statistical analysis using generalized least squares regression indicated that heterogeneity within our system was a significant driving factor that interacted with macrofaunal density and species identity. Microphytobenthic biomass was highest in enriched patches, suggesting that nutrients were obtained locally from the sediment–water interface and not from the water column. Our findings demonstrate that organic enrichment can cause the development of heterogeneity which influences infaunal bioturbation and consequent nutrient generation, a driver of microphytobenthic production

Species effects on ecosystem processes are modified by faunal responses to habitat composition.

Heterogeneity is a well-recognized feature of natural environments, and the spatial distribution and movement of individual species is primarily driven by resource requirements. In laboratory experiments designed to explore how different species drive ecosystem processes, such as nutrient release, habitat heterogeneity is often seen as something which must be rigorously controlled for. Most small experimental systems are therefore spatially homogeneous, and the link between environmental heterogeneity and its effects on the redistribution of individuals and species, and on ecosystem processes, has not been fully explored. In this paper, we used a mesocosm system to investigate the relationship between habitat composition, species movement and sediment nutrient release for each of four functionally contrasting species of marine benthic invertebrate macrofauna. For each species, various habitat configurations were generated by selectively enriching patches of sediment with macroalgae, a natural source of spatial variability in intertidal mudflats. We found that the direction and extent of faunal movement between patches differs with species identity, density and habitat composition. Combinations of these factors lead to concomitant changes in nutrient release, such that habitat composition effects are modified by species identity (in the case of NH4-N) and by species density (in the case of PO4-P). It is clear that failure to accommodate natural patterns of spatial heterogeneity in such studies may result in an incomplete understanding of system behaviour. This will be particularly important for future experiments designed to explore the effects of species richness on ecosystem processes, where the complex interactions reported here for single species may be compounded when species are brought together in multi-species combinations