Exploitation and threat analysis of open mobile devices

ANCS'09: Symposium on Architecture for Networking and Communications Systems

Volumn , Issue , 2009, Pages 20-29

  Liu, Lei ^a   Zhang, Xinwen ^b   Yan, Guanhua ^c   Chen, Songqing ^a  

^a George Mason University   (United States)

^b SAMSUNG INFORMATION SYSTEMS AMERICA   (United States)

^c LOS ALAMOS NATIONAL LABORATORY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CELL PHONE; CYBER-PHYSICAL SYSTEMS; DISTRIBUTED DENIAL OF SERVICE ATTACK; INFORMATION LEAKAGE; LARGE REGIONS; MALICIOUS ACTIVITIES; MOBILE COMPUTING SYSTEMS; MOBILE SYSTEMS; MOBILE USERS; MULTI-CLASS; OPEN ENVIRONMENT; PHONE CALLS; PUBLIC SERVICES; QUEUING NETWORK MODEL; SECURITY MECHANISM; SMART-PHONES; THREAT ANALYSIS;

COMPUTER CRIME; COMPUTER OPERATING SYSTEMS; DISTRIBUTED COMPUTER SYSTEMS; GLOBAL SYSTEM FOR MOBILE COMMUNICATIONS; MOBILE COMPUTING; MOBILE DEVICES; NETWORK ARCHITECTURE; NETWORK SECURITY; PORTABLE EQUIPMENT; TELEPHONE SETS;

TELEPHONE SYSTEMS;

EID: 78650956193     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1882486.1882493     Document Type: Conference Paper

References (49)

1. 911 guidelines. http://www.marc.org/publicsafety/ResponseGuidelines.pdf.
2. 911 statistics. http://www.lapeercounty911.org/stats.htm.
3. Ammarmor. http://en.opensuse.org/AppArmor.
4. Android. http://code.google.com/android/.
5. Android security and permissions. http://code.google.com/android/devel/ security.html.
6. Cabir. http://www.f-secure.com/v-descs/cabir.shtml.
7. Cardblock. http://www.f-secure.com/v-descs/cardblock-a.shtml.
8. Commwarrior. http://www.f-secure.com/v-descs/commwarrior.shtml.
9. Dampig. http://www.f-secure.com/v-descs/dampig-a.shtml.
10. Fontal. http://www.f-secure.com/v-descs/fontal-a.shtml.
11. Gartner. http://www.engadget.com/2009/03/13/gartner-posts-worldwide- mobile-os-nu%mbers-for-2008/.
12. iphone appstore. http://applications.samsungmobile.com/en/gbp/index.html.
13. Limo foundation. http://www.limofoundation.org/en/technical-documents. html.
14. Limo spef. http://www.limofoundation.org/api/R1/ams/spef/fnd/index.html.
15. The linux intrusion defence system (lids). http://www.lids.org/.
16. Locknut. http://www.f-secure.com/v-descs/locknut-e.shtml.
17. Mabir. http://www.f-secure.com/v-descs/mabir.shtml.
18. Maemo. http://www.maemo.org.
19. Mcafee mobile security report 2008. http://www.mcafee.com/us/research/ mobile-security-report-2008.html.
20. Mcafee mobile security report 2009. http://www.mcafee.com/us/local- content/reports/mobile-security-report-2%009.pdf.
21. Montavista mobilinux 5.0. http://www.mvista.com/download/MontaVista- Mobilinux-5-datasheet.pdf.
22. Motomagx security. http://ecosystem.motorola.com/get-inspired/ whitepapers/security-whitepa%per.pdf.
23. Openezx. http://wiki.openezx.org/Main-Page.
24. Openmoko. http://www.openmoko.org/.
25. Psap. http://en.wikipedia.org/wiki/E911.
26. Security in qtopia phones. http://www.linuxjournal.com/article/9896.
27. Skulls. http://www.f-secure.com/v-descs/skulls.shtml.
28. http://en.wikipedia.org/wiki/ARM-architecture.
29. http://en.wikipedia.org/wiki/San-Francisco-Bay-Area.
30. http://portal.etsi.org/stq/Workshop2005/presentations2005/ P13-SpeechQuali%ty-CellularNetworks.pdf.
31. https://www.cia.gov/library/publications/the-world-factbook/print/us. html%.
32. Wireless 911 services. http://www.fcc.gov/cgb/consumerfacts/ wireless911srvc.html.
33. Wireless facts. http://www.mywireless.org/facts/.
34. WTB report. http://www.scribd.com/doc/311371/US-Federal-Communications- Commission-F%CC-Official\-Release-DA023413A1.
35. J. Cheng, S. Wong, H. Yang, and S. Lu. Smartsiren: Virus detection and alert for smartphones. In Proceedings of ACM MobiSys, San Juan, Puerto Rico, 2007.
36. C. Guo, H. Wang, and W. Zhu. Smart-phone attacks and defenses. In Proceedings of HotNets III, San Diego, CA, November 2004.
37. C. Heath. Symbian os platform security, symbian press, 2006.
38. G. Hu and D. Venugopal. A malware signature extraction and detection method applied to mobile networks. In Proceedings of IPCCC, April 2007.
39. M. Hypponen. State of cell phone malware in 2007. http://www.usenix.org/ events/sec07/tech/hypponen.pdf.
40. H. Jasso, C. Baru, T. Fountain, W. Hodgkiss, D. Reich, and K. Warner. Using 9-1-1 call data and the space-time permutation scan statistic for emergency event detection. In Proceedings of the 9th annual International Digital Government Research Conference.
41. H. Kim, J. Smith, and K. G. Shin. Detecting energy-greedy anomalies and mobile malware variants. In Proc. of The International Conference on Mobile Systems, Applications, and Services, 2008.
42. P. Loscocco and S. Smalley. Integrating flexible support for security policies into the linux operating system. In Proceedings of USENIX Annual Technical Conference, pages 29-42, June 25-30 2001.
43. D. A. Menasce and V. A.F. Almeida. Capacity Planning for Web Services: metrics, models, and methods.
44. D. A. Menasce, L. W. Dowdy, and V. A.F. Almeida. Performance by Design: Computer Capacity Planning By Example.
45. C. Miller, J. Honoroff, and J. Mason. Security evaluation of apple's iphone. http://content.securityevaluators.com/iphone/exploitingiphone.pdf, July 2007.
46. C. Mulliner, G. Vigna, D. Dagon, and W. Lee. Using labeling to prevent cross-service attacks against smart phones. In Proceedings of DIMVA, 2006.
47. R. Racic, D. Ma, and H. Chen. Exploiting mms vulnerabilities to stealthily exhaust mobile phone's battery. In Proceedings of the Second International Conference on Security and Privacy in Communication Networks (SecureComm 2006), Baltimore, Maryland, August 2006.
48. D. Venugopal, G. Hu, and N. Roman. Intelligent virus detection on mobile devices. In Proceedings of ACM PST, Markham, Ontario, Canada, October 2006.
49. P. Wang, S. Kang, and K. Kim. Tamper resistant software through dynamic integrity checking. In Proceedings of the 2005 Symposium of Cryptography and Information Security, Maiko Kobe, Japan, Jan. 2005.