application - centric security policies on unmodified android .
Apex: extending Android permission model and enforcement with user-defined runtime constraints