Porscha: Policy oriented secure content handling in android

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2010, Pages 221-230

  Ongtang, MacHigar ^a   Butler, Kevin ^b   McDaniel, Patrick ^c  

^a DHURAKIJ PUNDIT UNIVERSITY   (Thailand)

^b UNIVERSITY OF OREGON   (United States)

^c The Pennsylvania State University   (United States)

Author keywords

Android; DRM; mobile phone security; security policy

Indexed keywords

ANDROID (OPERATING SYSTEM); COPYRIGHTS; MOBILE SECURITY; SMARTPHONES;

'CURRENT; ANDROID; CELLULAR NETWORK; DIGITAL RIGHTS MANAGEMENT; MANAGEMENT POLICY; MOBILE CONTENT; MOBILE PHONE SECURITIES; POLICY-ORIENTED; SECURITY POLICY; SMART PHONES;

MIDDLEWARE;

EID: 78751555807     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1920261.1920295     Document Type: Conference Paper

References (52)

1. Android Community ROM. http://www.cyanogenmod.com/, March 2010.
2. I hate DRM: A site dedicated to reclaiming consumer digital rights. http://ihatedrm.com, June 2010.
3. Mobile Watchdog. http://www.mymobilewatchdog.com/, January 2010.
4. SMS Trap. http://www.smstrap.com/, January 2010.
5. Stealth SMS. http://stealthsms.trusters.com/s-features.htm, January 2010.
6. A5/1 Security Project. Creating A5/1 Rainbow Tables. http://reflextor. com/trac/a51, 2009.
7. Apache Software Foundation. Apache James Mime4j. http://james.apache.org/ mime4j/, March 2010.
8. G. Appenzeller, L. Martin, and M. Schertler. Identity-Based Encryption Architecture and Supporting Data Structures, Jan. 2009. IETF RFC 5408.
9. L. Bauer, S. Garriss, J. M. Mccune, M. K. Reiter, J. Rouse, and P. Rutenbar. Device-enabled authorization in the grey system. In Proceedings of the 8th Information Security Conference (ISC'05), pages 431-445, 2005.
10. E. Becker, W. Buhse, D. Günnewig, and N. Rump, editors. Digital Rights Management Technological, Economic, Legal and Political Aspects. Springer, 1 edition, 2003.
11. D. Boneh and M. Franklin. Identity-Based Encryption from the Weil Pairing. In Proceedings of CRYPTO, 2001.
12. J. Clause, W. Li, and A. Orso. Dytan: A Generic Dynamic Taint Analysis Framework. In Proceedings of the 2007 International Symposium on Software Testing and Analysis (ISSTA), pages 196-206, 2007.
13. D. E. Denning. A Lattice Model of Secure Information Flow. Commun. ACM, 19(5):236-243, May 1976.
14. O. Dunkelman, N. Keller, and A. Shamir. A Practical-Time Attack on the A5/3 Cryptosystem Used in Third Generation GSM Telephony. In Proceedings of the 30th Annual Cryptology Conference (CRYPTO 2010), 2010.
15. J.-E. Ekberg and M. Kyläanpää. Mobile Trusted Module (MTM) - An Introduction. Technical Report NRC-TR-2007-015, Nokia Research Center, Helsinki, Finland, Nov. 2007.
16. W. Enck, M. Ongtang, and P. McDaniel. On Lightweight Mobile Phone Application Certifiscation. In Proceedings of ACM CCS, November 2009.
17. Free Software Foundation, Inc. The Campaign to Eliminate DRM. http://www.defectivebydesign.org/, June 2010.
18. Gartner. Gartner Says Worldwide Mobile Phone Sales to End Users Grew 8 Per Cent in Fourth Quarter 2009; Market Remained Flat in 2009. http://www.gartner.com/it/page.jsp?id=1306513, Feb. 2010.
19. C. Gentry. Certificate-Based Encryption and the Certificate-Revocation Problem. Advances in Cryptology, 2656, January 2003.
20. M. Gholami, S. M. Hashemi, and M. Teshnelab. A Framework for Secure Message Transmission Using SMS-Based VPN. Research and Practical Issues of Enterprise Information Systems II, 1:503-511, 2008.
21. GigaOm. The Apple App Store Economy. http://gigaom.com/2010/01/12/the- apple-app-store-economy, Jan. 2010.
22. J. Horwitz and B. Lynn. Toward Hierarchical Identity-Based Encryption. In Proceedings of EUROCRYPT '02, pages 466-481, London, UK, 2002. Springer-Verlag.
23. J.-S. Hwu, R.-J. Chen, and Y.-B. Lin. An Efficient Identity-Based Cryptosystem for End-to-End Mobile Security. IEEE Trans. Wireless Comm., 5(9):2586-2593, September 2006.
24. R. Iannella. Digital Rights Management (DRM) Architectures. D-Lib Magazine, 7(6), 2001.
25. IETF Network Working Group. Post Office Protocol - Version 3. http://www.ietf.org/rfc/rfc1939.txt, May 1996.
26. IETF Network Working Group. Internet Message Access Protocol - Version 4, rev1. http://www.ietf.org/rfc/rfc1939.txt, March 2003.
27. IETF Network Working Group. DNS Security Introduction and Requirements. http://www.ietf.org/rfc/rfc4033.txt, March 2005.
28. ITU. Measuring the Information Society. http://www.itu.int/ITU-D/ict/ publications/idi/2010/index.html, 2010.
29. S. Jobs. Thoughts on Music. http://www.apple.com/hotnews/thoughtsonmusic/ , February 2007.
30. M. Kirkpatrick and E. Bertino. Enforcing Spatial Constraints for Mobile RBAC Systems. In Proceedings of the 15th ACM symposium on Access control models and technologies, 2010.
31. B. Lee, C. Boyd, E. Dawson, K. Kim, J. Yang, and S. Yoo. Secure Key Issuing in ID-based Cryptography. In Proceedings of the ACSW Frontiers Workshop, 2004.
32. P. A. Loscocco, P. W. Wilson, J. A. Pendergrass, and C. D. McDonell. Linux Kernel Integrity Measurement Using Contextual Inspection. In Proceedings of ACM STC, 2007.
33. Microsoft Corporation. ActiveSync HTTP Protocol Specification, version 6.0. http://msdn.microsoft.com/en-us/library/dd299446(EXCHG.80).aspx, May 2010.
34. Microsoft Corporation. Microsoft PlayReady. http://www.microsoft.com/ playready/default.mspx, June 2010.
35. D. Muthukumaran, A. Sawani, J. Schiffman, B. M. Jung, and T. Jaeger. Measuring Integrity on Mobile Phone Systems. In Proceedings of ACM SACMAT, June 2008.
36. M. Ongtang, S. McLaughlin, W. Enck, and P. McDaniel. Semantically Rich Application-Centric Security in Android. In Proceedings of Annual Computer Security Applications Conference (ACSAC), December 2009.
37. Open Mobile Alliance Ltd. Rights Expression Language Version 1.0. Technical Report OMA-Download-DRMREL-V1-0-20040615-A, Open Mobile Alliance, June 2004.
38. Open Mobile Alliance Ltd. DRM Architecture 2.0.1. Technical Report OMA-AD-DRM-V2-0-1-20080226-A, Open Mobile Alliance, February 2008.
39. Open Mobile Alliance Ltd. DRM Rights Expression Language Version 2.0.2. Technical Report OMA-TS-DRM REL-V2-0-2-20080723-A, Open Mobile Alliance, July 2008.
40. PacketVideo Corporation. Content Policy Manager Developer's Guide OHA 1.0 r.1. November 2008.
41. PacketVideo Corporation. PV Android DivX Premium Package. July 2009.
42. PacketVideo Corporation. PV Android Windows Media Package. November 2009.
43. Portio Research. Mobile Messaging Futures 2010-2014: Analysis and Growth Forecsts for Mobile Messaging Markets Worldwide, 2010.
44. V. Rao and T. Jaeger. Dynamic Mandatory Access Control for Multiple Stakeholders. In Proceedings of ACM SACMAT, June 2009.
45. R. Sailer, X. Zhang, T. Jaeger, and L. van Doorn. Design and Implementation of a TCG-based Integrity Measurement Architecture. In Proceedings of the 13th USENIX Security Symposium, Aug. 2004.
46. A. Shabtai, Y. Fledel, and Y. Elovici. Securing Android-Powered Mobile Devices Using SELinux. IEEE Security and Privacy, 8:36-44, 2010.
47. S. Smalley, C. Vance, and W. Salamon. Implementing SELinux as a Linux Security Module. Technical Report 01-043, NAI Labs, 2001.
48. M. Smith, C. Schridde, B. Agel, and B. Freisleben. Securing Mobile Phone Calls with Identity-Based Cryptography. LNCS: Advances in Information Security and Assurance, 5576:210-222, June 2009.
49. TCG. TPM Main: Part 1 - Design Principles. Specification Version 1.2, Level 2 Revision 103. 2007.
50. P. Traynor, P. McDaniel, and T. La Porta. Security for Telecommunications Networks. Advances in Information Security. Springer, July 2008.
51. Z. Wan, K. Ren, and B. Preneel. A Secure Privacy-Preserving Roaming Protocol Based on Hierarchical Identity-Based Encryption for Mobile Networks. In Proceedings of ACM WiSec, 2008.
52. H. Yin, D. Song, M. Egele, C. Kruegel, and E. Kirda. Panorama: Capturing System-Wide Information Flow for Malware Detection and Analysis. In Proceedings of ACM CCS, 2007.