Abstract
With the increased adoption of IoT devices, it becomes necessary to detect malware before sensitive information is leaked to unfrusted individuals or technologies. Because of their limited computing resources, conventional malware detection techniques cannot be adopted to IoT devices. To solve this problem, we propose a malware detection and prevention framework that tracks information flow within the IoT ecosystem. The framework focuses on Android malware that compromises IoT user information in mobile devices as well as in the cloud.