2014 International Conference on Privacy and Security in Mobile Systems (PRISMS)最新文献

Adaptive online/offline RFID scheme for supply chain management systems 供应链管理系统的自适应在线/离线RFID方案

2014 International Conference on Privacy and Security in Mobile Systems (PRISMS) Pub Date : 2014-05-11 DOI: 10.1109/PRISMS.2014.6970598

Zeeshan Bilal, K. Martin

引用次数: 2

A keyboard that manages your passwords in Android 在安卓系统中管理密码的键盘

2014 International Conference on Privacy and Security in Mobile Systems (PRISMS) Pub Date : 2014-05-11 DOI: 10.1109/PRISMS.2014.6970592

Faysal Boukayoua, B. Decker, Vincent Naessens

引用次数: 2

Android - On-device detection of SMS catchers and sniffers Android -在设备上检测短信捕获器和嗅探器

2014 International Conference on Privacy and Security in Mobile Systems (PRISMS) Pub Date : 2014-05-11 DOI: 10.1109/PRISMS.2014.6970601

Peter Teufl, Thomas Zefferer, Christoph Wörgötter, Alexander Oprisnik, Daniel M. Hein

{"title":"Android - On-device detection of SMS catchers and sniffers","authors":"Peter Teufl, Thomas Zefferer, Christoph Wörgötter, Alexander Oprisnik, Daniel M. Hein","doi":"10.1109/PRISMS.2014.6970601","DOIUrl":"https://doi.org/10.1109/PRISMS.2014.6970601","url":null,"abstract":"With 6.1 trillion text messages sent in 2010 alone, short message service (SMS) is still one of the most popular mobile communication services. Due to its continuing popularity, SMS technology is nowadays used in various fields of application. This also includes security-sensitive fields such as e-banking, or e-government. In these fields, SMS technology is for instance employed to authorize financial transactions or the creation of qualified electronic signatures. Modern smartphone platforms such as Google Android provide application developers with the means to include SMS functionality. This can be beneficial in most cases but also facilitates the implementation of malware that is able to send and receive SMS messages unnoticed by the legitimate end user. In this context, SMS sniffers and SMS catchers have recently attracted attention. This kind of malware intercepts incoming SMS messages either to spy on security-sensitive data transmitted via SMS or to receive SMS-based malware control commands. For security-sensitive SMS-based applications, SMS catchers pose a serious threat. A recent attack on SMS-based e-banking systems has employed SMS catchers on smartphones to steal 36.000.000 Euro from corporate and private bank accounts in Europe. Unfortunately, security software for smartphones is still in the fledging stages and current solutions are not able to reliably detect SMS catchers. To overcome this problem, we introduce different methods to detect SMS sniffers and SMS catchers on smartphones. We discuss benefits and limitations of the proposed methods and show how these methods can be assembled to a comprehensive detection workflow for SMS-based malware. By providing means to detect SMS catchers and sniffers on smartphones, our work contributes to the security of current and future SMS-based applications.","PeriodicalId":272766,"journal":{"name":"2014 International Conference on Privacy and Security in Mobile Systems (PRISMS)","volume":"87 8 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-05-11","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121042659","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

Do you think your passwords are secure? 你认为你的密码安全吗?

2014 International Conference on Privacy and Security in Mobile Systems (PRISMS) Pub Date : 2014-05-11 DOI: 10.1109/PRISMS.2014.6970600

Dominik Ziegler, Mattias Rauter, Christof Stromberger, Peter Teufl, Daniel M. Hein

{"title":"Do you think your passwords are secure?","authors":"Dominik Ziegler, Mattias Rauter, Christof Stromberger, Peter Teufl, Daniel M. Hein","doi":"10.1109/PRISMS.2014.6970600","DOIUrl":"https://doi.org/10.1109/PRISMS.2014.6970600","url":null,"abstract":"Many systems rely on passwords for authentication. Due to numerous accounts for different services, users have to choose and remember a significant number of passwords. Password-Manager applications address this issue by storing the user's passwords. They are especially useful on mobile devices, because of the ubiquitous access to the account passwords. Password-Managers often use key derivation functions to convert a master password into a cryptographic key suitable for encrypting the list of passwords, thus protecting the passwords against unauthorized, off-line access. Therefore, design and implementation flaws in the key derivation function impact password security significantly. Design and implementation problems in the key derivation function can render the encryption on the password list useless, by for example allowing efficient bruteforce attacks, or - even worse - direct decryption of the stored passwords. In this paper, we analyze the key derivation functions of popular Android Password-Managers with often startling results. With this analysis, we want to raise the awareness of developers of security critical apps for security, and provide an overview about the current state of implementation security of security-critical applications.","PeriodicalId":272766,"journal":{"name":"2014 International Conference on Privacy and Security in Mobile Systems (PRISMS)","volume":"40 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-05-11","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127318045","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

One-pass authenticated key establishment protocol on bilinear pairings for Wireless Sensor Networks 无线传感器网络双线性对的一遍认证密钥建立协议

2014 International Conference on Privacy and Security in Mobile Systems (PRISMS) Pub Date : 2014-05-11 DOI: 10.1109/PRISMS.2014.6970595

M. R. Mishra, J. Kar, B. Majhi

引用次数: 5

Security and privacy in the Internet of Things: Current status and open issues 物联网中的安全和隐私:现状和开放问题

2014 International Conference on Privacy and Security in Mobile Systems (PRISMS) Pub Date : 2014-05-11 DOI: 10.1109/PRISMS.2014.6970594

Mohamed Abomhara, G. M. Køien

引用次数: 322

Android encryption systems Android加密系统

2014 International Conference on Privacy and Security in Mobile Systems (PRISMS) Pub Date : 2014-05-11 DOI: 10.1109/PRISMS.2014.6970599

Peter Teufl, Andreas Fitzek, Daniel M. Hein, Alexander Marsalek, Alexander Oprisnik, Thomas Zefferer

{"title":"Android encryption systems","authors":"Peter Teufl, Andreas Fitzek, Daniel M. Hein, Alexander Marsalek, Alexander Oprisnik, Thomas Zefferer","doi":"10.1109/PRISMS.2014.6970599","DOIUrl":"https://doi.org/10.1109/PRISMS.2014.6970599","url":null,"abstract":"The high usability of smartphones and tablets is embraced by consumers as well as the corporate and public sector. However, especially in the non-consumer area the factor security plays a decisive role for the platform-selection process. All of the current companies within the mobile device sector added a wide range of security features to the initially consumer-oriented devices (Apple, Google, Microsoft), or have dealt with security as a core feature from the beginning (RIM, now Blackerry). One of the key security features for protecting data on the device or in device backups are encryption systems, which are available in the majority of current devices. However, even under the assumption that the systems are implemented correctly, there is a wide range of parameters, specific use cases, and weaknesses that need to be considered when deploying mobile devices in security-critical environments. As the second part in a series of papers (the first part was on iOS), this work analyzes the deployment of the Android platform and the usage of its encryption systems within a security-critical context. For this purpose, Android's different encryption systems are assessed and their susceptibility to different attacks is analyzed in detail. Based on these results a workflow is presented, which supports deployment of the Android platform and usage of its encryption systems within security-critical application scenarios.","PeriodicalId":272766,"journal":{"name":"2014 International Conference on Privacy and Security in Mobile Systems (PRISMS)","volume":"33 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2014-05-11","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130416202","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 20

An improvement of the batch-authentication and key agreement framework for P2P-based online social networks 基于p2p的在线社交网络批认证和密钥协议框架的改进

2014 International Conference on Privacy and Security in Mobile Systems (PRISMS) Pub Date : 2014-05-11 DOI: 10.1109/PRISMS.2014.6970596

Huihui Yang, V. Oleshchuk

引用次数: 4

Security pairings using physical layer properties of wireless communications 使用无线通信物理层属性的安全配对

2014 International Conference on Privacy and Security in Mobile Systems (PRISMS) Pub Date : 2014-05-11 DOI: 10.1109/PRISMS.2014.6970593

Jani Suomalainen, Antti Evesti, A. Kotelba

引用次数: 0

Distributed privacy-preserving mean estimation 分布式隐私保护均值估计

2014 International Conference on Privacy and Security in Mobile Systems (PRISMS) Pub Date : 2014-05-11 DOI: 10.1109/PRISMS.2014.6970597

Mirco Schönfeld, M. Werner

引用次数: 4