Privilege escalation attacks on Android
Apex: extending Android permission model and enforcement with user-defined runtime constraints