Permission Smells Detection for IoT Applications on Android Platform

Abstract

With the rapid development of the Internet of Things (IoT), the end-users may remotely control their IoT devices via their Android devices. The developers may request some unnecessary permissions and request sensitive permission access every time without checking the granted status, which leads to the risk of over privilege and privacy leakage. In this paper, we propose a methodology used to detect two kinds of permission smells on Android devices by similarity coefficient and depth-first search algorithm to assist the developers in detecting the Android-specific smells during development.