BlurSense: Dynamic fine-grained access control for smartphone privacy

2014 IEEE Sensors Applications Symposium, SAS 2014 - Proceedings

Volumn , Issue , 2014, Pages 329-332

  Cappos, Justin ^a   Wang, Lai ^a   Weiss, Richard ^b   Yang, Yi ^d   Zhuang, Yanyan ^a,c  

^a POLYTECHNIC UNIVERSITY   (United States)

^b UNIVERSITY OF BRITISH COLUMBIA   (Canada)

^c EVERGREEN STATE COLLEGE   (United States)

^d FONTBONNE UNIVERSITY   (United States)

Author keywords

data filtering; privacy; Sensor access control

Indexed keywords

DATA PRIVACY; SMARTPHONES;

ACCESS CONTROL MECHANISM; COARSE-GRAINED; DATA FILTERING; MOBILE APPLICATIONS; ON-BOARD SENSORS; PRIVACY FILTERS; PRIVACY RISKS; SMART DEVICES;

ACCESS CONTROL;

EID: 84900031252     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SAS.2014.6798970     Document Type: Conference Paper

References (35)

1. "Smartphone sales overtook PCs in 2011," http://www.neowin.net/ news/ smartphone-sales-overtook-pcs-in-2011.
2. "Number of smartphones tops one billion," http://www.telegraph. co.uk/ finance/9616011/Number-of-smartphones-tops-one-billion.html.
3. "Cisco Visual Networking Index: Global Mobile Data Traffic Forecast Update, 20122017," http://www.cisco.com/en/US/solutions/collateral/ ns341/ns525/ns537/ns705/ns827/white paper c11-520862.html.
4. L. Cai, S. Machiraju, and H. Chen, "Defending against sensor-sniffing attacks on mobile phones," in Proceedings of the 1st ACM workshop on Networking, systems, and applications for mobile handhelds. ACM, 2009, pp. 31-36.
5. "Sensibility Testbed," http://seattlesensor.wordpress.com/.
6. A. Shabtai, Y. Fledel, U. Kanonov, Y. Elovici, S. Dolev, and C. Glezer, "Google android: A comprehensive security assessment," Security &Privacy, IEEE, vol. 8, no. 2, pp. 35-44, 2010.
7. Z. Xu, K. Bai, and S. Zhu, "Taplogger: Inferring user inputs on smartphone touchscreens using on-board motion sensors," in Proceedings of the fifth ACM conference on Security and Privacy in Wireless and Mobile Networks. ACM, 2012, pp. 113-124.
8. E. Miluzzo, A. Varshavsky, S. Balakrishnan, and R. R. Choudhury, "Tapprints: your finger taps have fingerprints," in Proceedings of the 10th international conference on Mobile systems, applications, and services. ACM, 2012, pp. 323-336.
9. N. Xu, F. Zhang, Y. Luo, W. Jia, D. Xuan, and J. Teng, "Stealthy video capturer: a new video-based spyware in 3g smartphones," in Proceedings of the second ACM conference on Wireless network security. ACM, 2009, pp. 69-78.
10. L. Cai and H. Chen, "Touchlogger: inferring keystrokes on touch screen from smartphone motion," in Proceedings of the 6th USENIX conference on Hot topics in security. USENIX Association, 2011, pp. 9-9.
11. R. Schlegel, K. Zhang, X.-y. Zhou, M. Intwala, A. Kapadia, and X. Wang, "Soundcomber: A stealthy and context-aware sound trojan for smartphones." in NDSS, vol. 11, 2011, pp. 17-33.
12. P. Marquardt, A. Verma, H. Carter, and P. Traynor, "(sp) iphone: decoding vibrations from nearby keyboards using mobile phone accelerometers," in Proceedings of the 18th ACM conference on Computer and communications security. ACM, 2011, pp. 551-562.
13. "More Than 25% of Android Apps Know Too Much About You," http://yro.slashdot.org/story/12/11/02/1316238/more-than-25-ofandroid-apps-know- too-much-about-you.
14. "App Auto-Tweets False Piracy Accusations," http://yro.slashdot.org/ story/12/11/13/2249203/app-auto-tweets-false-piracy- accusations.
15. "China mobile users warned about large botnet threat," http://www.bbc. co.uk/news/technology-21026667.
16. "US Wants Apple, Google, and Microsoft To Get a Grip On Mobile Privacy," http://yro.slashdot.org/story/13/02/02/2124204/us-wantsapple- google-and-microsoft-to-get-A-grip-on-mobile-privacy.
17. M. Conti, V. T. N. Nguyen, and B. Crispo, "Crepe: Context-related policy enforcement for android," in Information Security. Springer, 2011, pp. 331-345.
18. P. Hornyack, S. Han, J. Jung, S. Schechter, and D. Wetherall, "These aren't the droids you're looking for: retrofitting android to protect data from imperious applications," in Proceedings of the 18th ACM conference on Computer and communications security. ACM, 2011, pp. 639-652.
19. "BlurSense," https://blursense.poly.edu.
20. J. Cappos, A. Dadgar, J. Rasley, J. Samuel, I. Beschastnikh, C. Barsan, A. Krishnamurthy, and T. Anderson, "Retaining sandbox containment despite bugs in privileged memory-safe code," in Proceedings of the 17th ACM conference on Computer and communications security, ser. CCS '10. New York, NY, USA: ACM, 2010, pp. 212-223. [Online]. Available: http://doi.acm.org/10.1145/ 1866307.1866332
21. "Seattle Sensors, GitHub," https://github.com/fmetzger/ androidsensorium.
22. "Seattle," accessed January 10, 2014, https://seattle.poly.edu/ .
23. "Seattle on Android-Seattle-Trac," https://seattle.poly.edu/ wiki/ SeattleOnAndroid.
24. "Seattle Testbed on Android," https://play.google.com/store/ apps/ detailsid=com.seattleonandroid.
25. "Platform Versions," http://developer.android.com/about/ dashboards/ index.html.
26. "android-xmlrpc: Very thin xmlrpc client library for Android platform," https://code.google.com/p/android-xmlrpc/.
27. "Seattle Sensors Project," http://seattlesensors.poly.edu/.
28. D. Mulligan and A. Schwartz, "Your place or mine?: privacy concerns and solutions for server and client-side storage of personal information," in Proceedings of the tenth conference on Computers, freedom and privacy: challenging the assumptions. ACM, 2000, pp. 81-84.
29. Y. Zhou, X. Zhang, X. Jiang, and V. Freeh, "Taming informationstealing smartphone applications (on android)," Trust and Trustworthy Computing, pp. 93-107, 2011.
30. P. Pearce, A. P. Felt, G. Nunez, and D. Wagner, "Addroid: Privilege separation for applications and advertisers in android," in Proceedings of AsiaCCS, 2012.
31. "NoScript," http://noscript.net/.
32. "AdBlock," http://safariadblock.com/.
33. "Flashblock," http://en.wikipedia.org/wiki/Flashblock.
34. W. Enck, M. Ongtang, and P. McDaniel, "Understanding android security," IEEE Security and Privacy, 2009.
35. M. Ongtang, S. McLaughlin, W. Enck, and P. McDaniel, "Semantically rich application-centric security in android," in ACSAC, 2009.