Security and Privacy in Smartphones and Mobile Devices最新文献_第4页

Short paper: can your phone trust your friend selection? 短文:你的手机能信任你选择的朋友吗?

Security and Privacy in Smartphones and Mobile Devices Pub Date : 2011-10-17 DOI: 10.1145/2046614.2046627

Sebastian Trapp, Matthias Wählisch, J. Schiller

引用次数: 4

Security implications of Android: a closed system, open software mobile platform Android的安全含义:一个封闭的系统，开放的软件移动平台

Security and Privacy in Smartphones and Mobile Devices Pub Date : 2011-10-17 DOI: 10.1145/2046614.2046630

Hassen Saïdi

{"title":"Security implications of Android: a closed system, open software mobile platform","authors":"Hassen Saïdi","doi":"10.1145/2046614.2046630","DOIUrl":"https://doi.org/10.1145/2046614.2046630","url":null,"abstract":"Smartphones blur the boundaries between the traditional feature phone and a general purpose computer such as a laptop. The Android OS, from Google, was created to be an open alternative to fully closed platforms such as Apple's iOS or Microsoft's Windows Phone OS. However, upon closer inspection, there are closed elements in the Android OS platform. First, there are closed portions to Google's Android code (e.g., manufacturer drivers). Second, users are closed off from accessing and modifying core elements of the OS such as the kernel and system daemons through both software and policy controls. These controls are enacted by Google, cellular carriers, and smartphone manufactures.\u0000 We aim to open a broad and inclusive debate about the issues of openness in the mobile environment. The goal of this panel is to discuss if a mobile platform can both be fully open and secure for all stakeholders involved. The panel will only discuss Android as it the most widely researched smartphone OS, with leading market share, and highly targeted by malware. We plan to discuss the gains, losses, and conflicts surrounding the Android's open, in source, yet closed, in the system, platform.","PeriodicalId":213305,"journal":{"name":"Security and Privacy in Smartphones and Mobile Devices","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-10-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130932711","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Crowdroid: behavior-based malware detection system for Android Crowdroid:基于行为的Android恶意软件检测系统

Security and Privacy in Smartphones and Mobile Devices Pub Date : 2011-10-17 DOI: 10.1145/2046614.2046619

Iker Burguera, Urko Zurutuza, S. Nadjm-Tehrani

引用次数: 1136

Location based power analysis to detect malicious code in smartphones 基于位置的功率分析，以检测智能手机中的恶意代码

Security and Privacy in Smartphones and Mobile Devices Pub Date : 2011-10-17 DOI: 10.1145/2046614.2046620

Bryan Dixon, Yifei Jiang, A. Jaiantilal, Shivakant Mishra

引用次数: 46

Short paper: a look at smartphone permission models 简要介绍一下智能手机许可模型

Security and Privacy in Smartphones and Mobile Devices Pub Date : 2011-10-17 DOI: 10.1145/2046614.2046626

K. Au, Yi Fan Zhou, Zhen Huang, Phillipa Gill, D. Lie

引用次数: 78

A survey of mobile malware in the wild 野外移动恶意软件调查

Security and Privacy in Smartphones and Mobile Devices Pub Date : 2011-10-17 DOI: 10.1145/2046614.2046618

A. Felt, Matthew Finifter, Erika Chin, Steve Hanna, D. Wagner

引用次数: 859

Practical and lightweight domain isolation on Android 在Android上实用且轻量级的域隔离

Security and Privacy in Smartphones and Mobile Devices Pub Date : 2011-10-17 DOI: 10.1145/2046614.2046624

Sven Bugiel, Lucas Davi, A. Dmitrienko, Stephan Heuser, A. Sadeghi, Bhargava Shastry

{"title":"Practical and lightweight domain isolation on Android","authors":"Sven Bugiel, Lucas Davi, A. Dmitrienko, Stephan Heuser, A. Sadeghi, Bhargava Shastry","doi":"10.1145/2046614.2046624","DOIUrl":"https://doi.org/10.1145/2046614.2046624","url":null,"abstract":"In this paper, we introduce a security framework for practical and lightweight domain isolation on Android to mitigate unauthorized data access and communication among applications of different trust levels (e.g., private and corporate). We present the design and implementation of our framework, TrustDroid, which in contrast to existing solutions enables isolation at different layers of the Android software stack: (1) at the middleware layer to prevent inter-domain application communication and data access, (2) at the kernel layer to enforce mandatory access control on the file system and on Inter-Process Communication (IPC) channels, and (3) at the network layer to mediate network traffic. For instance, (3) allows network data to be only read by a particular domain, or enables basic context-based policies such as preventing Internet access by untrusted applications while an employee is connected to the company's network.\u0000 Our approach accurately addresses the demands of the business world, namely to isolate data and applications of different trust levels in a practical and lightweight way. Moreover, our solution is the first leveraging mandatory access control with TOMOYO Linux on a real Android device (Nexus One). Our evaluation demonstrates that TrustDroid only adds a negligible overhead, and in contrast to contemporary full virtualization, only minimally affects the battery's life-time.","PeriodicalId":213305,"journal":{"name":"Security and Privacy in Smartphones and Mobile Devices","volume":"10 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-10-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121915300","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 191