Measuring integrity on mobile phone systems

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn , Issue , 2008, Pages 155-164

  Muthukumaran, Divya ^a   Sawani, Anuj ^a   Schiffman, Joshua ^a   Jung, Brian M ^b   Jaeger, Trent ^a  

^a PENNSYLVANIA STATE UNIVERSITY   (United States)

^b SAMSUNG Electronics   (South Korea)

Author keywords

Integrity measurement; Mobile phones; Selinux

Indexed keywords

CRITICAL APPLICATIONS; HIGH INTEGRITIES; INTEGRITY MEASUREMENT; INTEGRITY MEASUREMENTS; MANDATORY ACCESS CONTROLS; MOBILE BANKINGS; MOBILE PHONE SYSTEMS; PHONE SYSTEMS; RAPID ADVANCEMENTS; SELINUX; SMART PHONES;

ACCESS CONTROL; APPLICATIONS; MOBILE DEVICES; MOBILE PHONES; MOBILE TELECOMMUNICATION SYSTEMS; QUALITY ASSURANCE; SECURITY SYSTEMS; TELECOMMUNICATION EQUIPMENT; TELEPHONE; TELEPHONE SETS;

TELEPHONE SYSTEMS;

EID: 57349085063     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1377836.1377862     Document Type: Conference Paper

References (35)

1. Trusted Platform, http://www.sisa.Samsung.com/innovation/tp/index.htm.
2. Bank of America. Mobile banking, http://www.bankofamerica.com/ onlinebanking/index.cfm?template=mobile-banking&statecheck=PA.
3. W. E. Boebert and R. Y. Kain. A practical alternative to heirarchical integrity policies. In Proceedings of the 8th National Computer Security Conference, 1985.
4. F-Secure Computer Virus Information Pages: Cabir. http://www.f-secure. com/v-descs/cabir.shtml, 2006.
5. L. S. Clair, J. Schiffman, T. Jaeger, and P. McDaniel. Establishing and sustaining system integrity via root of trust installation. In Proceedings of the 2007 Annual Computer Security Applications Conference, Dec. 2007.
6. D. D. Clark and D. Wilson. A comparison of military and commercial security policies. In 1987 IEEE Symposium on Security and Privacy, May 1987.
7. J. de Haas. Symbian Phone Security. http://www.blackhat.com/ presentations/bh-europe-05/BH-EU-05-deHaas.pdf.
8. T. Fraser. LOMAC: Low water-mark integrity protection for COTS environments. In 2000 IEEE Symposium on Security and Privacy, May 2000.
9. N. Hardy. The Confused Deputy: (or why capabilities might have been invented). ACM SIC OPS Operating Systems Review, 22(4), 1988.
10. IBM. Integrity Measurement Architecture for Linux, http://www. sourceforge.net/projects/linux-ima.
11. 236 mln wireless subscribers in the us in 2006. http://www.itfacts.biz/ index.php?id=P8421, 2007.
12. O. W. R. M. J. Marchesini, S.W. Smith. Experimenting with tcpa/tcg hardware, or: How i learned to stop worrying and love the bear. Technical Report TR2003-476, Computer Science Technical Report, Dartmouth College, Dec. 2003.
13. T. Jaeger, R. Sailer, and U. Shankar. PRIMA: Policy-reduced integrity measurement architecture. In Proceedings of the 11th ACM Symposium on Access Control Models and Technologies, pages 19-28, June 2006.
14. C. S. Janak Desai, George Wilson. Extending selinux to meet lspp data import/export requirements, Feb 2006. http://selinux-symposium.org/2006/papers/ 04-lspp.pdf.
15. K.J.Biba. Integrity considerations for secure computer systems. Technical Report MTR-3153, Mitre Corporation, June 1975.
16. F-Secure Computer Virus Information Pages: Mabir.A. http://www.f-secure. com/v-descs/mabir.shtml, 2005.
17. H. Maruyama, F. Seliger, N. Nagaratnam T. Ebringer, S. Munetoh, S. Yoshihama, and T. Nakamura. Trusted platform on demand. Technical Report RT0564, IBM, Feb. 2004.
18. Montavista. Montavista Mobilinux. http://www.mvista.com/product-detail- mob.php.
19. Motorola. Opensource Motorola. https://opensource.motorola.com.
20. H. Nahari. Trusted secure embedded Linux. In Proceedings of the Linux Symposium Proceedings of the Linux Symposium, Proceedings of the Linux Symposium, 2007.
21. Novell. AppArmor Limix Application Security. http://www.novell.com/linux/ security/apparmor/.
22. Security-Enhanced Linux. http://www.nsa.gov/selinux.
23. Openmoko.com http://openmoko.com. http://www.openmoko.com/, 2008.
24. V. Rao. Security in mobile phones - handset and networks perspective. Master's thesis, The Pennsylvania State University, 2007.
25. U. Shankar, T. Jaeger, and R. Sailer. Toward automated information-flow integrity verification for security-critical applications. In Proceedings of the 2006 ISOC Networked and Distributed Systems Security Symposium (NDSS'06), Feb. 2006.
26. E. Shi, A. Perrig, and L. V. Doom. BIND: A time-of-use attestation service for secure distributed systems. In Proceedings of IEEE Symposium on Security and Privacy, May 2005.
27. Symbian OS: the open mobile operating system. http://www.symbian.com/, 2008.
28. Symbian Limited. Symbian signed. http://www.symbiansigned.com.
29. Trifinite.org - home of the trifinite.group. http://trifinite.org/ trifinite-stuff.html, 2008.
30. Trolltech. Qtopia Open Source, http://trolltech.com/products/qtopia/ opensource.
31. Trusted Computing Group. Trusted computing group: Mobile, https://www.trustedcomputinggroup.org/groups/mobile.
32. Trusted Computing Group. TCG TPM specification version 1.2 revision 85, Feb 2005. https://www.trustedcomputinggroup.org/groups/tpm/.
33. Windows mobile: Smartphone and pda software. http://www.microsoft.com/ windowsmobile/, 2008.
34. C. Wright, C. Cowan, S. Smalley, J. Morris, and G. Kroah-Hartman. Linux security modules: General security support for the Linux kernel. In Proceedings of the 11th USENIX Security Symposium, pages 17-31, August 2002.
35. X. Zhang, O. Aciicmez, and J.-P. Seifert. A trusted mobile phone reference architecture via secure kernel. In Proceedings of the 2007 ACM Workshop on Scalable Trusted, Commuting, 2007.