Semantically rich application-centric security in Android

Security and Communication Networks

Volumn 5, Issue 6, 2012, Pages 658-673

  Ongtang, Machigar ^a   Mclaughlin, Stephen ^b   Enck, William ^c   Mcdaniel, Patrick ^b  

^a DHURAKIJ PUNDIT UNIVERSITY   (Thailand)

^b PENNSYLVANIA STATE UNIVERSITY   (United States)

^c North Carolina State University   (United States)

Author keywords

Android; Security; Smartphones

Indexed keywords

ANDROID (OPERATING SYSTEM); CRYPTOGRAPHY; SEMANTICS; SMARTPHONES;

ANDROID; APPLICATION PROVIDERS; APPLICATION-CENTRIC; SECURITY; SECURITY INFRASTRUCTURE; SECURITY REQUIREMENTS; SMART-PHONE APPLICATIONS; TECHNICAL DETAILS;

MOBILE SECURITY;

EID: 84862082806     PISSN: 19390114     EISSN: 19390122     Source Type: Journal    
DOI: 10.1002/sec.360     Document Type: Article

References (30)

1. Android Community Rom based on Donut tree., March 2010.
2. Sapphire-port-dream: Haykuro's custom ROMS for the G1., March 2010.
3. ACCESS Co., Ltd. ACCESS Linux Platform., July 2010.
4. Anderson JP. Computer security technology planning study, volume II. Technical Report ESD-TR-73-51, Deputy for Command and Management Systems, HQ Electronics Systems Division (AFSC), L. G. Hanscom Field, Bedford, MA, October 1972.
5. Apple Inc. Apple App Store., June 2009.
6. Apple Inc. iOS 4., July 2010.
7. Becher M, Hund R. Kernel-level Interception and Applications on Windows Mobile Devices. Technical Report TR-2008-003, Reihe Informatik, 2008.
8. Becher M. Computer Security: Art and Science. Addison-Wesley: Reading, MA, 2003.
9. Cheswick W, Bellovin S, Ruben A. Firewalls and Internet Security: Repelling the Wily Hacker. Second edition, ACM Books / Addison-Wesley: Boston, MA, 2003.
10. Davies J. Oracle White Paper-Oracle SOA Suite 11g. Technical report, Oracle Corporation, January 2009.
11. Desmet L, Joosen W, Massacci F, Naliuka K, Philippaerts P, Philippaerts F, Vanoverberghe D. A flexible security architecture to support third-party applications on mobile devices. In Proceedings of ACM Workshop on Computer Security Architecture, 2007; 19-28.
12. Enck W, Ongtang M, McDaniel P. On lightweight mobile phone application certification. In Proceedings of ACM CCS, ACM: New York, NY, November 2009.
13. Enck W, Ongtang M, McDaniel P. Understanding Android security. IEEE Security & Privacy Magazine January/February 2009; 7(1): 50-57.
14. Google Inc. Android Market., June 2009.
15. Gruener W. Microsoft: UAC isn't broken, you just don't get it., February 2009.
16. Independent Security Evaluators. Exploiting android. .
17. McDaniel P, Prakash A. Methods and limitations of security policy reconciliation. In IEEE Symposium on Security & Privacy, May 2002; 73-87.
18. Microsoft Corporation. Application Architecture for. NET Designing Applications and Services. Microsoft Corporation: Redmond, WA, 2002.
19. Muthukumaran D, Sawani A, Schiffman J, Jung BM, Jaeger T. Measuring Integrity on Mobile Phone Systems. In Proceedings of ACM SACMAT, June 2008.
20. Nokia Forum. Midp 2.0: Tutorial on signed midlets v.1.1. July 2005.
21. Ongtang M, McLaughlin S, Enck W, McDaniel P. Semantically rich application-centric security in Android. In Proceedings of Annual Computer Security Applications Conference (ACSAC 2009), December 2009.
22. Open Mobile Terminal Platform (OMTP). OMTP Application Security Framework V.2.2. pages 1-46, 2008.
23. OpenIntents. Openintents., March 2010.
24. Rao V, Jaeger T. Dynamic mandatory access control for multiple stakeholders. In Proceedings of ACM SACMAT, ACM: New York, NY, June 2009.
25. Research In Motion Ltd. Blackberry App World., June 2009.
26. S3MS. Security of Software and Services for Mobile Systems. .
27. Schaefer TJ. The complexity of satisfiability problems. In STOC '78: Proceedings of the tenth annual ACM symposium on Theory of computing, ACM: New York, NY, 1978; 216-226.
28. Symbian Ltd. Symbian Signed., August 2008.
29. Yegulalp S. Windows Vista: Inside User Account Control (UAC)., April 2007.
30. Zhang X, Aciiçmez O, Seifert JP. A trusted mobile phone reference architecture via secure kernel. In Proceedings of the ACM Workshop on Scalable Trusted Computing, ACM: New York, NY, November 2007; 7-14.