Page Information

Title:	DRD07-X. Protect exported services with strong permissions
Author:	Fred Long	Aug 12, 2013
Last Changed by:	David Svoboda	Mar 12, 2025
Tiny Link: (useful for email)	https://wiki.sei.cmu.edu/confluence/x/DtAxBQ
Export As:	Word · PDF

Parent Page     Page: Rule 00. Component Security (CPS)

• incomplete
• rule
• android-applicable
• xml
• cps
• drd

Time	Editor
Mar 12, 2025 14:54	David Svoboda	View Changes
Mar 12, 2025 14:44	David Svoboda	View Changes
Oct 22, 2017 09:32	Robin Yuan	View Changes
Oct 21, 2017 18:19	Robin Yuan	View Changes
added a bibliography; edited non-compliant solution and compliant solution; added 1 more related vulnerabilities; going to edit code again and add bibliography
Oct 21, 2017 11:41	Robin Yuan
updated text box for my name

External Links (11)
    https://cwe.mitre.org/data/definitions/926.html
    https://nvd.nist.gov/vuln/detail/CVE-2017-12816
    https://nvd.nist.gov/vuln/detail/CVE-2016-10135
    https://commonsware.com/blog/2014/02/12/vulnerabilities-cus…
    https://people.eecs.berkeley.edu/~daw/papers/intents-mobisy…
    www.cs.cmu.edu/ourcs/register.html
    https://www.securecoding.cert.org/confluence/pages/viewpage…
    https://stackoverflow.com/questions/8816623/how-to-use-cust…
    https://developer.android.com/guide/topics/manifest/permiss…
    https://www.securecoding.cert.org/confluence/display/java/D…
    https://www.securecoding.cert.org/confluence/display/java/D…

Android (1)     Page: About the OurCS Workshop

SEI CERT Oracle Coding Standard for Java (2)     Home page: SEI CERT Oracle Coding Standard for Java     Page: Rule AA. References