Analysis of Over-Privileged Android Applications

An analysis of over-privileged Android applications that request more permissions than they need.

An analysis of over-privileged Android applications that request more permissions than they need. It is offered as a reference project: a complete, worked example of how a system like this is designed, built and evaluated, so that a developer can study it, run it and learn from it.

It suits learners who want practical security experience: understanding the threat, building the defence or detector, testing it against realistic attacks and reporting the results.

The main parts are a realistic threat model, the detection or protection mechanism itself, testing against sample attacks, and reporting and alerting of findings. The reference build uses Kotlin, Android SDK, Firebase, and REST API, with a clear project structure, setup instructions and sample data so that it can be run and extended.