Android › Module 2 › Lesson 5
Lab — APK Permission Analyzer
Practice reading permission lists and deciding install-or-reject like a defender
Opening
Think like malware analysts—before install
You will not reverse-engineer code here. You will judge permission sets the way a careful user should. For each fictional app profile, decide: Install, Install with denies, or Reject.
1. Decision Rubric
Permission analyzer rubricASK: Does each permission match the app's stated job? RED: Accessibility, SMS, notification access, device admin for toys/utilities YELLOW: Contacts/mic/location without clear need GREEN: Camera for camera apps, location while navigating maps
ASK: Does each permission match the app's stated job? RED: Accessibility, SMS, notification access, device admin for toys/utilities YELLOW: Contacts/mic/location without clear need GREEN: Camera for camera apps, location while navigating maps
2. Profile A — “Ultra Battery Saver Pro”
Claims: extends battery life. Permissions: Accessibility, Device admin, SMS, Contacts, Draw over other apps. Decision: Reject. This is a classic malware-shaped permission bundle.
3. Profile B — “City Transit Maps”
Claims: offline maps for buses. Permissions: Approximate location while using, Storage/files for offline maps, Notifications. Decision: Install reasonable; deny Contacts if requested; watch reviews.
4. Profile C — “WhatsApp Gold MOD”
Claims: extra themes, sideloaded APK from a blog. Permissions: full messaging clone behavior + Accessibility. Decision: Reject. MOD messengers are a top malware / account-theft vector.
Complete the permission analyzer lab
Write Install / Deny-some / Reject for Profiles A, B, and C and list the red permissions that drove each choice.
Knowledge Check
Profile A should be:
Multiple choice
Knowledge Check
True or False: Sideloaded “WhatsApp Gold” APKs are a safe alternative to the official app.
True or False