An OVAL-based Vulnerability Assessment Framework for the Android Platform
Résumé
Vulnerability management constitutes a complex activity that must be addressed in order to increase the overall security of computing devices. This work is mainly focused on the vulnerability assessment process as the first key step for achieving this goal within the Android platform. Taking advantage of the experimental Sandbox project, we have proposed and implemented an OVAL-based framework that enables the integration of such security knowledge into the management plane of mobile Android-based devices. In addition, an extensive set of experiments has been performed showing the feasibility of our solution.