Abstract: Systems, methods, and computer-readable media are provided for controlling an application's access to sensors based on application status and/or other metadata. An application security management system accesses a request by an application instance on a device for a given instance of access to an audio, image, location, sensitive data, or network access resource of the device. The request is made to an interface that controls access to the audio, image, location, sensitive data, or network access resource based on stored rules. Metadata associated with the request indicates which state of candidate states the application instance is in at a time of the request and/or past states of the application instance prior to the request. Based at least in part on the given application state or states or a pattern thereof, and at least one of the stored rules, the application security management system determines whether to grant the given instance of access.

Abstract: Systems, methods, and computer-readable media are provided for implementing an application security management system. An application instance is executed that uses an interface that wraps external resource access functionality of the application instance. The interface is used to allow access from the application instance to one or more external resources, and an application security management system managing the interface logs requests. A call is received including a request for access to a resource external to the application instance along with metadata about functionality carried out by the application instance in association with the request. A use-case is determined for the request based at least in part on the metadata. The use-case is compared to a set of rules that map different use-cases to different candidate external resources to determine if the request to the resource is valid for the use-case. When the resource is not valid for the use-case, the request is rejected and logged.