Repository files navigation

This is a patchset for Android 4.3 (build JSS15J) that adds a protection schemeagainst the threats caused by dynamically loaded external code. Seethecorresponding paper atNDSSorthis blogpostfor more information.

To try it out, get thesources for Android buildJSS15J and make sure that you can compile the system. Then apply the patchesto the respective subdirectories (e.g., apply frameworks_base.patch toframeworks/base in your Android sources). After building the system, you shouldonly be able to run system apps. All others will be blocked by the protectionsystem.

In order to allow additional code, you have to whitelist it (this is where theverification providers that we suggest in the paper come into play). Use thescript create.py to translate a file containing SHA1 hashes into our binaryrepresentation. Then copy the result over to /data/whitelist/ on your device. Itwill be detected and loaded immediately.