Using labeling to prevent cross-service attacks against smart phones

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4064 LNCS, Issue , 2006, Pages 91-108

  Mulliner, Collin ^a   Vigna, Giovanni ^a   Dagon, David ^b   Lee, Wenke ^b  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b GEORGIA INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CELLULAR TELEPHONE SYSTEMS; COMPUTER VIRUSES; INTEGRATION; INTERFACES (COMPUTER); PERSONAL DIGITAL ASSISTANTS; SECURITY OF DATA; WIRELESS TELECOMMUNICATION SYSTEMS;

GSM-BASED SERVICES; NETWORK SERVICES; SERVICE BOUNDARIES; WIRELESS DEVICES;

COMPUTER CRIME;

EID: 33746453742     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11790754_6     Document Type: Conference Paper

References (34)

1. Airscanner Corp. Advisory 05081102 vxFtpSrv 0.9.7 Remote Code Execution Vulnerability, http://www.airscanner.com/security/05081102_vxftpsrv.htm, 2005.
2. Airscanner Corp. Advisory 05081203 vxTftpSrv 1.7.0 Remote Code Execution Vulnerability, http://www.airscanner.com/security/05081203_vxtftpsrv.htm, 2005.
3. K. Biba. Integrity Considerations for Secure Computer Systems. Technical Report TR-3153, MITRE Corp, Bedford, MA, 1977.
4. Bluetooth SIG. Bluetooth. http://ww.bluetooth.org, 2006.
5. C. Cowan, C. Pu, and D. Maier. StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks. In Proceedings of the 7th USENIX Security Symposium, pages 63-78, 1998.
6. D. Elser. PicoWebServer Remote Unicode Stack Overflow Vulnerability. http://seclists.org/lists/bugtraq/2005/May/0333.html, May 2005.
7. D. Dagon, T. Martin, and T. Starner. Mobile Phones as Computing Devices: The Viruses are Coming! IEEE Pervasive Computing, October/December 2004.
8. E. Ito. FtpSvr - Ftp Server, http://www.oohito.com/wince/arm_j.htm, 1999.
9. G. Edjlali, A. Acharya, and V. Chaudhary. History-based Access Control for Mobile Code. In ACM Conference on Computer and Communication Security, 1998.
10. F-Secure Corporation. F-Secure Virus Descriptions: Skulls. http://www.f-secure.com/v-descs/skulls.shtml, 2004.
11. Familiar Linux - A Linux Distribution For Handheld Devices, http://familiar.handhelds.org/, 2006.
12. T. Fraser. LOMAC: MAC you can live with. In Proc. of the 2001 Usenix Annual Technical Conference, Jun 2001.
13. GSMA. GPRS - General Packet Radio Service, http://www.gsmworld.com, 2006.
14. GSMA. GSM - Global System for Mobile Communications, http://gsmworld.com, 2006.
15. Hewlett-Packard. HP iPAQ h5500. http://welcome.hp.com/country/us/en/ prodserv/handheld.html, 2006.
16. HTC. HTC Blue Angel. http://www.htc.com.tw, 2006.
17. i-mate. i-mate PDA2k. http://imate.com/t-DETAILSP_DA2K.aspx, 2006.
18. J. Koziol, D. Litchfield, D. Aitel, C. Anley, S. Eren, N. Mehta, and R. Hassell. The Shellcoder's Handbook: Discovering and Exploiting Security Holes. Wiley, 2003.
19. P. Loscocco and S. Smalley. Integrating Exible Support For Security Policies Into The Linux Operating System. In Proceedings of the FREENIX Track of the 2001 USENIX Annual Technical Conference, 2001.
20. Microsoft. Platform Builder for WindowsCE 5.0, Compiler Option Reference. http://msdn.microsoft.com/library/default.asp?url=/library/enus/wcepb-guide5/ html/wce50congs-enablesecuritychecks.asp, 2005.
21. Microsoft. Microsoft WindowsCE. NET 4.2 Platform, Memory Architecture. http://msdn.microsoft.com/library/default.asp?url=/library/enus/wcema-in4/ html/_wcesdk_windows_ce_memory_architecture.asp, 2006.
22. Microsoft. Windows Mobile, http://www.microsoft.com/windowsmobile/ pocketpc/, 2006.
23. Newmad Technologies AB. PicoWebServer. http://www.newmad.se/rnd- freeswpico.htm, 2005.
24. J. Rosenberg, H. Schulzrinne, G. Camarillo, A. Johnston, J. Peterson, R. Sparks, M. Handley, and E. Schooler. SIP: Session Initiation Protocol. RFC3261, 2002.
25. M. T. S. N. Christensen, K. Sorensen. Umbrella - We can't prevent the rain ... -But we don't get wet! Master's thesis, Aalborg University, January 2005.
26. A. Sabelfeld and A. C. Myers. Language-Based Information-Flow Security. IEEE Journal on Selected Areas in Communications, 21(1):5-19, January 2003.
27. San. Hacking Windows CE. Phrack, 0x0b(0x3f), August 2005.
28. R. Sandhu, D. Ferraiolo, and R. Kuhn. The NIST Model for Role-Based Access Control: Towards A Unified Standard. In Proceedings of the fifth ACM workshop on Role-based access control, pages 47-63, 2000.
29. SecurityFocus. BugTraq. http://www.securityfocus.com/airchive, 2006.
30. SJ Labs, Inc. Voice Over IP Software, http://www.sjlabs.com, 2005.
31. Symantec Security Response. SymbOS.Cabir. http://securityresponse. symantec.com/avcenter/venc/data/epoc.cabir.html, 2004.
32. Symbian, Inc. Information about Mosquitos Trojan, http://www.symbian.com/ press-office/2004/pr040810.html, 2004.
33. Vieka Technology Inc. PE FTP Server, http://www.vieka.com/peftpd.htm, 2005.
34. R. N. M. Watson. TrustedBSD: Adding Trusted Operating System Features to FreeBSD. In USENIX Annual Technical Conference, FREENIX Track, pages 15-28, 2001.