Earlence, I see the point you're trying to make, but I disagree with the statement "there's no such thing as a covert channel"
There's a great paper from NDSS 2011 that discusses a few possible covert channels on Android, where they use 2 applications collude to exfiltrate data from the phone. Granted, one of the two apps needs access to the data in the first place. However, once the data is accessed, sandboxing and IPC can be bypassed, and data can be sent to other apps. My advice to the OP is that detecting that data is moving through covert channels is a _really _ difficult problem, not just on Android, but on any platform. People looking at this problem tend to focus more on access controls for the data itself. Here's the paper: https://www.cs.indiana.edu/~kapadia/papers/soundminer-ndss11.pdf Cheers, On Tue, Apr 12, 2011 at 4:05 PM, Earlence <[email protected]> wrote: > all apps are sandboxed. theres no such thing as a covert channel. > if the app stores private data on the sdcard for the whole world to > see, thats a very bad design, which I doubt anyone would do. > if they communicate via any other IPC mech like intents or IDL, then > both apps were designed to co-ordinate with each other and your > question is then not valid. > > -Earlence > > On Apr 12, 8:58 pm, TheBlackMamba <[email protected]> wrote: >> Hi All, >> >> I'm trying to detect if one App is using some other App's data via >> overt/covert channels? >> Any help is highly appreciated! >> Thanks. > > -- > You received this message because you are subscribed to the Google Groups > "Android Security Discussions" group. > To post to this group, send email to > [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/android-security-discuss?hl=en. > > -- David Barrera Carleton Computer Security Lab Carleton University, Ottawa, ON. Canada -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/android-security-discuss?hl=en.
