Preventing Capability Abuse through Systematic Analysis of Exposed Interface