Smartphones are undoubtedly becoming ubiquitous. Malware has been a serious issue for smartphones and continuing advancing. Traditional defense mechanisms to malware, are not suitable for smartphones due to their resource intensive constraints. This made the malware to spread enormously all over the smartphone users. In this paper, we present the TWR (Tap-Wave-Rub) enhanced android application permission model which incorporates the denied access for the smartphones malware. And also the developing android application TWRDROID will review the permissions of apps and users can find whether it is malicious or not. It can remove the malicious applications. This paper is designed to enhance the security features of the android especially in the permission-based access control of the android application. This Android application will make the users who are prompted to deny or grant individual permissions to an application which needed for the first time. The proposed approach will be very effective for malware detection/prevention with low False Negative Rate and False Positive Rate, while imposing little to no additional burden on the smartphone users.