L4Android: A generic operating system framework for secure smartphones

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2011, Pages 39-50

  Lange, Matthias ^a   Liebergeld, Steffen ^a   Lackorzynski, Adam ^b   Warg, Alexander ^b   Peter, Michael ^a  

^a TECHNISCHE UNIVERSITÄT BERLIN   (Germany)

^b DRESDEN UNIVERSITY OF TECHNOLOGY   (Germany)

Author keywords

microkernel; near field communication; secure operating systems; smartphones; soft sim; system virtualization

Indexed keywords

MICROKERNEL; NEAR FIELD COMMUNICATIONS; SECURE OPERATING SYSTEM; SMARTPHONES; SOFT SIM; VIRTUALIZATIONS;

COMMUNICATION; COMPUTER HARDWARE; COMPUTER PRIVACY; COMPUTER SIMULATION; MOBILE DEVICES; PORTABLE EQUIPMENT; SIGNAL ENCODING;

COMPUTER OPERATING SYSTEMS;

EID: 80755143400     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2046614.2046623     Document Type: Conference Paper

References (49)

1. DroidDream. http://www.androidpolice.com/2011/03/01/the-mot her-of-all-android-malware-has-arrived-stole n-apps-released-to-the-market-that- root-you r-phone-steal-your-data-and-open-backdoor/, March 2011.
2. Genode OS Framework. http://genode.org, June 2011.
3. C. WALKER AND M. KONSTANT. OK Labs Enables World's First Virtualized Smartphone, with Mobile Virtualization Solution. http://www.ok-labs.com/rel eases/release/ok-labs-enables-worlds-first-vir tualized-smartphone-with-mobile- virtualizat, 2009.
4. G. KLEIN, K. ELPHINSTONE, G. HEISER, J. ANDRONICK, D. COCK, P. DERRIN, D. ELKADUWE, K. ENGELHARDT, R. KOLANSKI, M. NORRISH, T. SEWELL, H. TUCH AND H. WINWOOD. seL4: Formal Verification of an OS Kernel. In ACM Symposium on Operating System Principles (2009), ACM, pp. 207-220.
5. A. BALIGA, V. GANAPATHY AND L. IFTODE. Detecting Kernel-level Rootkits using Data Structure Invariants. IEEE Transactions on Dependable and Secure Computing 99, Preprints (TBD 2010), TBD.
6. A. LACKORZYNSKI AND A. WARG. Taming subsystems: capabilities as universal resource access control in L4. In Proceedings of the Second Workshop on Isolation and Integration in Embedded Systems (2009), IIES '09, ACM, pp. 25-30.
7. A. R. BERESFORD, A. RICE, N. SKEHIN AND R. SOHAN. MockDroid: trading privacy for application functionality on smartphones. In 12th Workshop on Mobile Computing Systems and Applications (March 2011).
8. A.U. SCHMIDT, N. KUNTZE AND M. KASPER. On the deployment of mobile trusted modules. In Wireless Communications and Networking Conference, 2008. WCNC 2008. IEEE (31 2008-april 3 2008), pp. 3169 -3174.
9. BARR, K., BUNGALE, P., DEASY, S., GYURIS, V., HUNG, P., NEWELL, C., TUCH, H., AND ZOPPIS, B. The vmware mobile virtualization platform: is that a hypervisor in your pocket? SIGOPS Oper. Syst. Rev. 44 (December 2010), 124-135.
10. C. LUDWIG. Porting OpenBSD to Fiasco. http://www.isti.tu-berlin.de/ fileadmin/fg214/fi nished-theses/cludwig/OpenBSDonFiasco.pdf, June 2011. Bachelor's Thesis, Security in Telecommunications, Technische Universität Berlin.
11. C. MULLINER, S. LIEBERGELD AND M. LANGE. HoneyDroid - Creating a Smartphone Honeypot. In Poster session of the IEEE Symposium on Security and Privacy (May 2011), IEEE.
12. C. PAPATHANASIOU AND N. J. PERCOCO. This is not the droid you're looking for... http://www.defcon.org/images/defcon-18/dc-18-p resentations/Trustwave- Spiderlabs/DEFCON-18-T rustwave-Spiderlabs-Android-Rootkit-WP.pdf, July 2010.
13. CANALYS. Android increases smart phone market leadership with 35 share. http://canalys.com/pr/2011/r2011051.html, 2011.
14. COVERITY INC. Coverity Scan 2010 Open Source Integrity Report. http://www.coverity.com/html/pr ess/coverity-scan-2010-report-reveals-high-ris k-software-flaws-in-android.html, 2010.
15. D. BARRERA, H. G. KAYACIK, P. C. VAN OORSCHOT AND A. SOMAYAJI. A methodology for empirical analysis of permission-based security models and its application to android. In Proceedings of the 17th ACM conference on Computer and communications security (New York, NY, USA, 2010), CCS '10, ACM, pp. 73-84.
16. D. MASLENNIKOV. Malware in the Android Market: here we go again. http://www.securelist.com/en/blog/11267/Malwar e-in-the-Android-Market-here-we- go-again, 2011.
17. D. MUTHUKUMARAN, A. SAWANI, J. SCHIFFMAN, B. M. JUNG AND T. JAEGER. Measuring integrity on mobile phone systems. In Proceedings of the 13th ACM symposium on Access control models and technologies (New York, NY, USA, 2008), SACMAT '08, ACM, pp. 155-164.
18. DROID LIFE: A DROID COMMUNITY BLOG. Motorola Eases Up on Locked Bootloader Stance, Plans to Unlock Portfolio in 2011? http://www.droid-life.com/ 2011/04/26/motorola-e ases-up-on-locked-bootloader-stance-plans-to-u nlock-portfolio-in-2011/, April 2011.
19. E. MONTI. Iphone Rootkit? There's an App for That. http://sandiego. toorcon.org/index.php?option= com-content&task=view&id=48&Itemid=9, October 2010.
20. F. BELLARD. QEMU, a fast and portable dynamic translator. In Proceedings of the annual conference on USENIX Annual Technical Conference (Berkeley, CA, USA, 2005), ATEC '05, USENIX Association, pp. 41-41.
21. G. J. POPEK AND R. P. GOLDBERG. Formal requirements for virtualizable third generation architectures. Commun. ACM 17 (July 1974), 412-421.
22. G. PORTOKALIDIS, P. HOMBURG, K. Anagnostakis and H. Bos. Paranoid Android: versatile protection for smartphones. In Proceedings of the 26th Annual Computer Security Applications Conference (New York, NY, USA, 2010), ACSAC '10, ACM, pp. 347-356.
23. GOOGLE INC. Distribution of Android Versions. http://developer.android. com/resources/dashboa rd/platform-versions.html, May 2011.
24. GOOGLE INC. Wallet. http://www.google.com/wallet, June 2011.
25. H. HÄRTIG, M. HOHMUTH, J. LIEDTKE, J. WOLTER AND S. SCHÖNBERG. The performance of μ-kernel-based systems. In Proceedings of the sixteenth ACM symposium on Operating systems principles (New York, NY, USA, 1997), SOSP '97, ACM, pp. 66-77.
26. J. BICKFORD, R. O'HARE, A. BALIGA, V. GANAPATHY AND L. IFTODE. Rootkits on smart phones: attacks, implications and opportunities. In Proceedings of the Eleventh Workshop on Mobile Computing Systems & Applications (New York, NY, USA, 2010), HotMobile '10, ACM, pp. 49-54.
27. J. LIEDTKE. On micro-kernel construction. In Proceedings of the fifteenth ACM symposium on Operating systems principles (New York, NY, USA, 1995), SOSP '95, ACM, pp. 237-250.
28. J. S. ROBIN AND C. E. IRVINE. Analysis of the Intel Pentium's ability to support a secure virtual machine monitor. In Proceedings of the 9th conference on USENIX Security Symposium - Volume 9 (Berkeley, CA, USA, 2000), USENIX Association, pp. 10-10.
29. J. Y. HWANG, S. B. SUH, S. K. HEO, C. J. PARK, J. M. RYU, S. Y. PARK AND C. R. KIM. Xen on ARM: System virtualization using Xen hypervisor for ARM-based secure mobile phones. In Consumer Communications and Networking Conference, 2008. CCNC 2008. 5th IEEE (2008), IEEE, pp. 257-261.
30. K. ADAMS AND O. AGESEN. A comparison of software and hardware techniques for x86 virtualization. In Proceedings of the 12th international Conference on Architectural Support for Programming Languages and Operating Systems (New York, NY, USA, 2006), ASPLOS-XII, ACM, pp. 2-13.
31. K. MAHAFFEY. Security Alert: DroidDream Malware Found in Official Android Market. http://blog.mylookout.com/2011/03/security-alert-malware-found -in-official-android-market-droiddream/, 2011.
32. L. LITTY, H. A. LAGAR-CAVILLA AND D. LIE. Hypervisor support for identifying covertly executing binaries. In Proceedings of the 17th conference on Security symposium (Berkeley, CA, USA, 2008), USENIX Association, pp. 243-258.
33. L. XIE, X. ZHANG, J.-P. SEIFERT AND S. ZHU. pBMDS: a behavior-based malware detection system for cellphone devices. In Proceedings of the third ACM conference on Wireless network security (New York, NY, USA, 2010), WiSec '10, ACM, pp. 37-48.
34. M. BISHOP. Computer Security: Art and Science. Addison-Wesley, 2003.
35. M. KASPER, N. KUNTZE AND A.U. SCHMIDT. Subscriber authentication in cellular networks with trusted virtual sims. In Advanced Communication Technology, 2008. ICACT 2008. 10th International Conference on (feb. 2008), vol. 2, pp. 903 -908.
36. MULLINER, C., VIGNA, G., DAGON, D., AND LEE, W. Using Labeling to Prevent Cross-Service Attacks Against Smart Phones. In Proceedings of the Conference on Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA) (Berlin, Germany, July 2006), vol. 4064 of LNCS, Springer, pp. 91-108.
37. N. FESKE AND C. HELMUTH. A Nitpicker's guide to a minimal-complexity secure GUI. In Proceedings of the 21st Annual Computer Security Applications Conference (2005), IEEE Computer Society, pp. 85-94.
38. O. FALKE, E. RUKZIO, U. DIETZ, P. HOLLEIS AND A. SCHMIDT. Mobile services for near field communication. Ludwig-Maximilians-Universität (LMU), Munich, Germany, Technical Report LMUMI-2007-1 (2007).
39. P. Chou. HTC to open bootloaders. https: //www.facebook.com/HTC/posts/ 10150307320018084, May 2011.
40. R. BHARDWAJ, P. REAMES, R. GREENSPAN, V. S. NORI AND E. UCAN. A Choices Hypervisor on the ARM architecture. Department of Computer Science, University of Illinois at Urbana-Champaign 11 (2006).
41. R. MIJAT AND A. NIGHTINGALE. Virtualization is Coming to a Platform Near You. ARM White Paper (2011).
42. R. UHLIG, G. NEIGER, D. RODGERS, A. L. SANTONI, F. C. M. MARTINS, A. V. ANDERSON, S. M. BENNETT, A. KAGI, F. H. LEUNG AND L. SMITH. Intel Virtualization Technology. Computer 38 (May 2005), 48-56.
43. S. LIEBERGELD. Lightweight Virtualization on Microkernel-based Systems. http://os.inf.tu-dresd en.de/papers-ps/liebergeld-diplom.pdf, January 2010. Diploma Thesis, Chair of Operating Systems, Technische Universität Dresden.
44. T. ALVES AND D. FELTON. TrustZone: Integrated hardware and software security. Tech. rep., ARM Limited, 2004.
45. W. ENCK, D. OCTEAU, P. MCDANIEL AND S. CHAUDHURI. A Study of Android Application Security. In Proceedings of the 20th USENIX Security Symposium (2011).
46. W. ENCK, P. GILBERT, B.-G. CHUN, L. P. COX, J. JUNG, P. MCDANIEL AND A. N. SHETH. TaintDroid: an information-flow tracking system for realtime privacy monitoring on smartphones. In Proceedings of the 9th USENIX conference on Operating systems design and implementation (Berkeley, CA, USA, 2010), OSDI'10, USENIX Association, pp. 1-6.
47. X. ZHANG, J.-P. SEIFERT AND O. ACICMEZ. SEIP: Simple and Efficient Integrity Protection for Open Mobile Platforms. In Information and Communications Security (2010), vol. 6476 of Lecture Notes in Computer Science, Springer Berlin / Heidelberg, pp. 107-125.
48. X. ZHANG, L. VAN DOORN, T. JAEGER, R. PEREZ AND R. SAILER. Secure coprocessor-based intrusion detection. In Proceedings of the 10th workshop on ACM SIGOPS European workshop (New York, NY, USA, 2002), EW 10, ACM, pp. 239-242.
49. Y. ZHOU, X. ZHANG, X. JIANG AND V. W. FREEH. Software Creates Privacy Mode To Help Secure Android Smartphones. http://news.ncsu.edu/releases/wms- jiang-tissa/, 2011.