In this paper, we initiate a formal study of security on Android: Google's new open-source platform for mobile devices. Specifically, we present a core typed language to describe Android applications, and to reason about their dataflow security properties. Our operational semantics and type system provide some necessary foundations to help both users and developers of Android applications deal with their security concerns.
Chaudhuri also proposed a formal language to describe Android applications and a type system to reason about inter-component data flows REF .
Language-based security on Android
PLAS '09
Computer Science