ZTA: A Novel Zero Trust Framework for Detection and Prevention of Malicious Android Applications

Abstract The proliferation of preloaded apps and third-party applications has raised significant concerns regarding user security and privacy. This study introduces the Zero Trust Architecture (ZTA), a novel approach to addressing the issues caused by poorly designed vulnerable mobile applications. ZTA employs a comprehensive strategy to safeguard user privacy, incorporating thorough app permission analysis alongside dynamic behavior assessment. The proposed framework closely monitors real-time app behavior and leverages the MITRE ATT&CK framework to identify security threats, vulnerabilities, and essential Tactics, Techniques, and Procedures (TTPs). The ZTA empowers users to make informed choices about app usage, promote data security, and cultivate a safer environment. Through this framework, users can confidently decide on app usage, ensuring the safeguarding of their data and fostering a more secure mobile app ecosystem. This research presents a proactive approach to privacy-conscious app utilization, bolstering user trust in the continually evolving realm of Android applications.