SEIP: Simple and efficient integrity protection for open mobile platforms

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6476 LNCS, Issue , 2010, Pages 107-125

  Zhang, Xinwen ^a   Seifert, Jean Pierre ^b   Aciiçmez, Onur ^a  

^a SAMSUNG INFORMATION SYSTEMS AMERICA   (United States)

^b TECHNISCHE UNIVERSITÄT BERLIN   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

CELLULAR PHONE; CELLULAR SERVICES; CONSTRAINED DEVICES; EFFECTIVE SOLUTION; HIGH ASSURANCE; INTEGRITY PROTECTION; MALWARES; MOBILE OPERATING SYSTEMS; MOBILE PLATFORM; PERFORMANCE STUDY; PLATFORM INTEGRITY; POLICY SPECIFICATION; REAL-WORLD; RULES BASED; SECURITY OBJECTIVES; SECURITY POLICY; SERVICE CONVERGENCE; SMART PHONES; THIRD PARTIES; UNIQUE FEATURES; USER EXPERIENCE; APPLICATION BEHAVIORS;

COMPUTER CRIME; COMPUTER OPERATING SYSTEMS; MOBILE DEVICES; MOBILE PHONES;

SECURITY OF DATA; MOBILE SECURITY;

EID: 78650919018     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-17650-0_9     Document Type: Conference Paper

References (33)

1. Android, http://code.google.com/android/
2. Gpe phone edition, http://gpephone.linuxtogo.org/
3. J2ME CLDC specifications, version 1.0a, http://jcp.org/aboutjava/ communityprocess/final/jsr030/index.html
4. Limo foundation, https://www.limofoundation.org
5. LMbench-tools for performance analysis, http://www.bitmover.com/lmbench
6. Maemo, http://www.maemo.org
7. Mcafee mobile security report (2008), http://www.mcafee.com/us/research/ mobile-security-report-2008.html
8. Mcafee mobile security report (2009), http://www.mcafee.com/us/local- content/reports/mobile-security-report-2009.pdf
9. Motomagx security, http://ecosystem.motorola.com/get-inspired/ whitepapers/security-whitepaper.pdf
10. OpenEZX, http://wiki.openezx.org/main-page
11. Pandalab report, http://pandalabs.pandasecurity.com/blogs/images/ pandalabs/2008/04/01/quarterly-report-pandalabs-q1-2008.pdf
12. Qtopia phone edition, http://doc.trolltech.com
13. Security in qtopia phones, http://www.linuxjournal.com/article/9896
14. Setools-policy analysis tools for selinux, http://oss.tresys.com/ projects/setools
15. Understanding the windows mobile security model, http://technet. microsoft.com/en-us/library/cc512651.aspx
16. Biba, K.J.: Integrity consideration for secure computer system. Technical report, Mitre Corp. Report TR-3153, Bedford, Mass. (1977)
17. Bose, A., Shin, K.: Proactive security for mobile messaging networks. In: Proc. of ACM Workshop on Wireless Security (2006)
18. Cheng, J., Wong, S., Yang, H., Lu, S.: Smartsiren: Virus detection and alert for smartphones. In: Proc. of ACM Conference on Mobile Systems, Applications (2007)
19. Clark, D.D., Wilson, D.R.: A comparison of commercial and military computer security policies. In: Proceedings of the IEEE Symposium on Security and Privacy (1987)
20. Enck, W., Ongtang, M., McDaniel, P.: Understanding android security. IEEE Security & Privacy 7(1) (2009)
21. Fraser, T.: LOMAC: MAC you can live with. In: Proc. of USENIX Annual Technical Conference (2001)
22. Heath, C.: Symbian os platform security. Symbian press (2006)
23. Hu, G., Venugopal, D.: A malware signature extraction and detection method applied to mobile networks. In: Proc. of 26th IEEE International Performance, Computing, and Communications Conference (2007)
24. Hypponen, M.: State of cell phone malware in 2007 (2007), http://www.usenix.org/events/sec07/tech/hypponen.pdf
25. Jaeger, T., Sailer, R., Shankar, U.: PRIMA: Policy-reduced integrity measurement architecture. In: Proc. of ACM SACMAT (2006)
26. Kim, H., Smith, J., Shin, K.G.: Detecting energy-greedy anomalies and mobile malware variants. In: Proc. of the International Conference on Mobile Systems, Applications, and Services (2008)
27. Li, N., Mao, Z., Chen, H.: Usable mandatory integrity protections for operating systems. In: Proc. of IEEE Symposium on Security and Privacy (2007)
28. Loscocco, P., Smalley, S.: Integrating flexible support for security policies into the linux operating system. In: Proceedings of USENIX Annual Technical Conference, June 25-30, pp. 29-42 (2001)
29. Lunt, T., Denning, D., Schell, R., Heckman, M., Shockley, M.: The seaview security model. IEEE Transactions on Software Engineering 16(6) (1990)
30. Mulliner, C., Vigna, G., Dagon, D., Lee, W.: Using labeling to prevent cross-service attacks against smart phones. In: Büschkes, R., Laskov, P. (eds.) DIMVA 2006. LNCS, vol. 4064, pp. 91-108. Springer, Heidelberg (2006)
31. Muthukumaran, D., Sawani, A., Schiffman, J., Jung, B.M., Jaeger, T.: Measuring integrity on mobile phone systems. In: Proc. of ACM SACMAT (2008)
32. Shankar, U., Jaeger, T., Sailer, R.: Toward automated information-flow integrity verification for security-critical applications. In: Proc. of NDSS (2006)
33. Venugopal, D., Hu, G., Roman, N.: Intelligent virus detection on mobile devices. In: Proc. of International Conference on Privacy, Security and Trust (2006)