Android Security

Appendix A

In Chapter 4, we discussed Manifest permissions that are requested by applications for performing operations such as accessing the Internet, sending SMS messages, and so forth. We have rated these permissions based on their security implications. Permission to access SMS messages or install packages is rated higher in terms of security implications (severity) than permission to access battery statistics. The table below shows the assigned score and severity/risk rating.

Score	Description/Risk
4	Critical
3	High
2	Medium
1	Information Disclosure

Table A.1 comprises a comprehensive list of Android “Manifest Permissions.” It contains a description as well as the risk rating assigned to each permission listed. ...