Secloud: A cloud-based comprehensive and lightweight security solution for smartphones

Computers and Security

Volumn 37, Issue , 2013, Pages 215-227

  Zonouz, Saman ^b   Houmansadra, Amir ^a   Berthiera, Robin ^a   Borisova, Nikita ^a   Sanders, William ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

^b UNIVERSITY OF MIAMI   (United States)

Author keywords

Cloud computing; Energy aware security; Intrusion detection; Real time intrusion response; Smartphone security

Indexed keywords

CLOUD COMPUTING; INTRUSION DETECTION; MERCURY (METAL); POWER MANAGEMENT; SECURITY SYSTEMS; SIGNAL ENCODING; SMARTPHONES;

ENERGY AWARE; INTRUSION RESPONSE; LIGHTWEIGHT SECURITIES; NETWORK CONNECTION; SECURITY ANALYSIS; SECURITY MONITORING; SECURITY SOLUTIONS; SMARTPHONE SECURITIES;

MOBILE SECURITY;

EID: 84884907087     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2013.02.002     Document Type: Article

References (44)

1. Android application repository, http://www.androidpolice.com/2011/03/01/; 2011.
2. Axelle Apvrille. Symbian worm Yxes: towards mobile botnets?, .
3. Biever C. Phone viruses: how bad is it?, http://www.newscientist.com/ article.ns?id=dn7080; 2005.
4. Boukerche A, Notare M. Behavior-based intrusion detection in mobile phone systems. Journal Parallel & Distributed Computing 2002; 62(9):1476-90.
5. Bugiel S, Davi L, Dmitrienko A., Fischer T, Sadeghi A-R, Shastry B. Towards taming privilege-escalation attacks on Android. In: Proceedings of the 19th Annual Network & Distributed System Security Symposium; 2012.
6. C. reports June 2012 U.S. mobile subscriber market share, http://www.comscore.com/Insights/Press-Releases/2012/8/comScore-Reports-June- 2012-U.S.-Mobile-Subscriber-Market-Share.
7. Chen X, Andersen J, Mao Z., Bailey M, Nazario J. Towards an understanding of anti-virtualization and anti-debugging behavior in modern malware. In: DSN. IEEE; 2008. P. 177-86.
8. Cheng J, Wong S, Yang H., Lu S. Smartsiren: Virus detection and alert for smartphones. In: Proceedings of the 5th international conference on mobile systems, applications and services. ACM; 2007. P. 258-71.
9. Dagon D, Martin T, Starner T. Mobile phones as computing devices: the viruses are coming! IEEE Pervasive Computing 2004; 3:11-5. (Pubitemid 40010893)
10. Dhamija R, Tygar JD, Hearst M. Why phishing works. In: Conference on Human factors in computing systems (CHI 2006); 2006.
11. Dietz M, Shekhar S, Pisetsky Y., Shu A, Wallach DS Quire: lightweight provenance for smart phone operating systems. In: 20th USENIX Security Symposium; 2011.
12. Dunham K. Mobile malware attacks and defense. Elsevier Inc.; 2009.
13. Dunlap GW, King ST, Cinar S, Basrai M.A., Chen PM Revirt: enabling intrusion analysis through virtual-machine logging and replay. In: Proceedings of the 2002 Symposium on Operating Systems Design and Implementation (OSDI); 2002. P. 211-24.
14. Enck W, Ongtang M, McDaniel P. On lightweight mobile phone application certification. In: Proceedings of the 16th ACM conference on computer and communications security. ACM; 2009. P. 235-45.
15. Enck W, Gilbert P, Chun B-G, Cox LP, Jung J, McDaniel P., et al Taintdroid: an information-flow tracking system for realtime privacy monitoring on smartphones. In: Proceedings of the 9th USENIX conference on Operating systems design and implementation, OSDI'10. Berkeley, CA, USA: USENIX Association. P. 1-6. URL, http://dl.acm.org/citation.cfm?id=1924943.1924971; 2010.
16. J. Flinn, Z. Mao, Can deterministic replay be an enabling tool for mobile computing?, Proceedings of the 12th workshop on Mobile Computing Systems and Applications (Hot Mobile).
17. Forrest S, Hofmeyr S, Somayaji A. The evolution of system-call monitoring. In: Proceedings of the 2008 annual computer security applications conference, ACSAC '08. Washington DC, USA: IEEE Computer Society; 2008. P. 418-30.
18. Gilbert P, Chun B-G, Cox LP, Jung J. Vision: automated security validation of mobile apps at app markets. In: Proceedings of the second international workshop on mobile cloud computing and services, MCS'11. New York, NY, USA: ACM; 2011. P. 21-6. http://dx.doi.org/10.1145/1999732.1999740.
19. Guo C, Wang HJ, Zhu W. Smart-phone attacks and defenses. In: Hot Nets III; 2004.
20. Houmansadr A, Zonouz S, Berthier R. A cloud-based intrusion detection and response system for mobile phones. In: Dependable Systems and Networks Workshops (DSN-W); 2011. P. 31-2. IEEE/IFIP 41st international conference on IEEE, 2011.
21. Kaspersky mobile security, http://www.kaspersky.com/mobile-downloads/; 2011.
22. Kim H, Karp B. Autograph: toward automated, distributed worm signature detection. In: Proceedings of the 13th conference on USENIX security symposium. Berkeley, CA, USA: USENIX Association; 2004. p. 19. 19.
23. J. Kirk. New android malware texts premium-rate numbers. ComputerWorld.
24. Kreibich C, Crowcroft J. Honeycomb: creating intrusion detection signatures using honeypots. SIGCOMM CCR 2004; 34:51-6.
25. Lange M, Liebergeld S, Lackorzynski A., Warg A, Peter M. L4android: a generic operating system framework for secure smartphones. In: Proceedings of the 1st ACM workshop on security and privacy in smartphones and mobile devices, SPSM '11. New York, NY, USA: ACM; 2011. P. 39-50. http://dx.doi.org/10.1145/ 2046614.2046623.
26. Leech M, Ganis M, Lee Y., Kuris R, Koblas D, Jones L. RFC 1928: SOCKS Protocol Version 5; Apr. 1996.
27. V. Library. .
28. Liu L, Yan G, Zhang X., Chen S. Virusmeter: preventing your cellphone from spies. In: RAID. Springer; 2009. P. 244-64.
29. Miettinen M, Halonen P. Host-based intrusion detection for advanced mobile devices. Advance Information Networking and Applications 2006; 2:72-6. (Pubitemid 44761304)
30. Oberheide J, Cooke E, Jahanian F. Cloudav: N-version antivirus in the network cloud. In: van Oorschot PC, editor. USENIX security symposium. USENIX Association; 2008a. P. 91-106.
31. Oberheide J, Veeraraghavan K, Cooke E., Flinn J, Jahanian F. Virtualized in-cloud security services for mobile devices. In: Proceedings of the first workshop on virtualization in mobile computing; 2008b. P. 31-5.
32. S. Perez. Over 50 DroidDream malware apps removed from android market http://www.readwriteweb.com.
33. Porras P, Saidi H, Yegneswaran V. An analysis of the iKeeB iPhone botnet. MobiSec 2010:141-52.
34. Portokalidis G, Homburg P, Anagnostakis K., Bos H. Paranoid android: versatile protection for smartphones. In: Proceedings of the 26th Annual Computer Security Applications Conference; 2010. P. 347-56.
35. Racic R. Exploiting mms vulnerabilities to stealthily exhaust mobile phone's battery. In: SecureComm; 2006. P. 1-10.
36. Rageagainsthecage. (2010).
37. Roesch M. Snort: lightweight intrusion detection for networks. In: USENIX-LISA; 1999. P. 229-38.
38. Schlegel R, Zhang K, Zhou X., Intwala M, Kapadia A, Wang X. Soundminer: a stealthy and context-aware sound trojan for smartphones. In: NDSS; 2011.
39. Singh S, Estan C, Varghese G., Savage S. Automated worm fingerprinting. In: SOSP; 2004. p. 4.
40. The terminal-emulator application, https://market.android.com/details?id= jackpal.androidterm&hl=en; 2010.
41. Wotring B, Potter B, Ranum M., Wichmann R. Host integrity monitoring using Osiris and Samhain. Syngress Publishing; 2005.
42. Yap TS, Ewe HT A mobile phone malicious software detection model with behavior checker. In: Web and communication technologies and Internet-related social issues, Vol. 3597; 2005. P. 57-65. (Pubitemid 41435937)
43. Zhao B, Xu Z, Chi C., Zhu S, Cao G. Mirroring smartphones for good: a feasibility study. In: Mobiquitous; 2010.
44. Zou CC, Gong W, Towsley D., Gao L. The monitoring and early detection of internet worms. IEEE/ACM Trans. Netw 2005; 13: 961-74. (Pubitemid 41685008)