ARANAC: A Bring-Your-Own-Permissions Network Access Control Methodology for Android Devices

In this paper, we introduce a new methodology for network access control Android devices based on app risk assessment. Named ARANAC (which stands Application Risk Assessment Network Access Control), is specially tailored scenarios using the Bring-Your-Own-Device (BYOD) policy, where adoption of some solutions can lead to problems in security and privacy both employees business organization. mainly relies analysis an aggregate permissions declared manifests installed applications users' devices. The scheme combines three operational modules: i) device monitoring tool, ii) novel permission-based model, iii) anomaly-based detection machine learning module (called MSNM, from Multivariate Statistical Monitoring) that provides diagnostic capabilities. ARANAC's novelty combination four features. Firstly, it privacy-aware, thus, does not require detailed information about but only permissions. Secondly, builds normality model by combining expert knowledge with data, capturing behavior complete population mobile Thirdly, dynamic, as are updated real time, allowing re-assess continuous basis. Finally, its capabilities allow giving recommendations final users so they capable mitigating their risks when accessing networks. We evaluated approach more than 80 at university campus obtained interesting results regarding usual deployment apps.