Improving mobile device security with operating system-level virtualization

Computers and Security

Volumn 52, Issue , 2015, Pages 207-220

  Wessel, Sascha ^a   Huber, Manuel ^a   Stumpf, Frederic ^a   Eckert, Claudia ^a  

^a FRAUNHOFER AISEC   (Germany)

Author keywords

Android; Integrity protection; Mobile device security; Operating system level virtualization; Smartphones

Indexed keywords

ANDROID (OPERATING SYSTEM); DIGITAL STORAGE; MOBILE DEVICES; SMARTPHONES; VIRTUAL REALITY; VIRTUAL STORAGE;

ANDROID; BATTERY LIFETIME; INTEGRITY PROTECTION; MOBILE DEVICE SECURITY; REMOTE ADMINISTRATION; RUNTIME OVERHEADS; VIRTUALIZATION TECHNIQUES; VIRTUALIZATIONS;

MOBILE SECURITY;

EID: 84927922022     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2015.02.005     Document Type: Article

References (20)

1. Alkassar, A., Scheibel, M., Stübel, M., Sadeghi, A.-R., Winandy, M., Security architecture for device encryption and VPN. ISSE 2006 – securing electronic busines processes, Vieweg, 2006, 54–63.
2. Andrus, J., Dall, C., Hof, A.V., Laadan, O., Nieh, J., Cells: a virtual Mobile smartphone architecture. Proceedings of the 23rd ACM symposium on operating systems principles, SOSP ‘11, ACM, New York, NY, USA, 2011, 173–187.
3. Barham, P., Dragovic, B., Fraser, K., Hand, S., Harris, T., Ho, A., et al. Xen and the art of virtualization. SIGOPS Oper Syst Rev 37:5 (2003), 164–177 http://doi.acm.org/10.1145/1165389.945462.
4. Barrera, D., Kayacik, H.G., van Oorschot, P.C., Somayaji, A., A methodology for empirical analysis of permission-based security models and its application to android. Proceedings of the 17th ACM conference on computer and communications security, CCS ‘10, ACM, New York, NY, USA, 2010, 73–84.
5. Bugiel, S., Davi, L., Dmitrienko, A., Heuser, S., Sadeghi, A.-R., Shastry, B., Practical and lightweight domain isolation on Android. Proceedings of the 1st ACM workshop on security and privacy in smartphones and mobile devices, SPSM ‘11, ACM, New York, NY, USA, 2011, 51–62.
6. Bugiel, S., Heuser, S., Sadeghi, A.-R., Flexible and fine-grained mandatory access control on Android for diverse security and privacy policies. Presented as part of the 22nd USENIX security symposium (USENIX security 13), USENIX, Washington, D.C, 2013, 131–146 https://www.usenix.org/conference/usenixsecurity13/technical-sessions/presentation/bugiel.
7. Carlson, B., Going “beyond a faster horse” to transform mobile devices. Tech. rep. 2011.
8. Davi, L., Dmitrienko, A., Sadeghi, A.-R., Winandy, M., Privilege escalation attacks on Android. Proceedings of the 13th international conference on information security, ISC’10, Springer-Verlag, Berlin, Heidelberg, 2011, 346–360.
9. Garfinkel, T., Pfaff, B., Chow, J., Rosenblum, M., Boneh, D., Terra: a virtual machine-based platform for trusted computing. Proceedings of the 19th ACM symposium on operating systems principles, SOSP ‘03, ACM, New York, NY, USA, 2003, 193–206.
10. Härtig, H., Hohmuth, M., Feske, N., Helmuth, C., Lackorzynski, A., Mehnert, F., et al. The nizza secure-system architecture. International conference on collaborative computing: networking, applications and worksharing, 2005.
11. Hwang, J.-Y., Suh, S.-B., Heo, S.-K., Park, C.-J., Ryu, J.-M., Park, S.-Y., et al. Xen on ARM: system virtualization using Xen hypervisor for ARM-based secure Mobile phones. 5th IEEE consumer communications and networking conference, CCNC ‘08, 2008, 257–261.
12. Lange, M., Liebergeld, S., Lackorzynski, A., Warg, A., Peter, M., L4Android: a generic operating system framework for secure smartphones. Proceedings of the 1st ACM workshop on security and privacy in smartphones and Mobile devices, SPSM ‘11, ACM, New York, NY, USA, 2011, 39–50.
13. Naik, Y., Xen-Cap: a capability framework for Xen. Tech. rep., 2013.
14. Ongtang, M., Butler, K., McDaniel, P., Porscha: policy oriented secure content handling in Android. Proceedings of the 26th annual computer security applications conference, ACSAC ‘10, ACM, New York, NY, USA, 2010, 221–230.
15. Rasmusson, L., Corcoran, D., Performance overhead of KVM on Linux 3.9 on ARM Cortex-A15. 2014, ACM.
16. Russello, G., Conti, M., Crispo, B., Fernandes, E., Moses: supporting operation modes on smartphones. Proceedings of the 17th ACM symposium on access control models and technologies, SACMAT ‘12, ACM, New York, NY, USA, 2012, 3–12 http://doi.acm.org/10.1145/2295136.2295140.
17. Shabtai, A., Fledel, Y., Elovici, Y., Securing android-powered mobile devices using SELinux. IEEE Secur Priv 8:3 (2010), 36–44.
18. Spencer, R., Smalley, S., Loscocco, P., Loscocco, P., Hibler, M., Lepreau, J., et al. The flask security architecture: system support for diverse security policies. Proceedings of the eighth USENIX security symposium, 1999, 123–139.
19. Wright, C., Cowan, C., Smalley, S., Morris, J., Kroah-Hartman, G., Linux security modules: general security support for the Linux kernel. Proceedings of the 11th USENIX security symposium, USENIX association, Berkeley, CA, USA, 2002, 17–31.
20. Zhang, X., Aciicmez, O., Seifert, J.-P., A trusted mobile phone reference architecture via secure kernel. Proceedings of the 2007 ACM workshop on scalable trusted computing, STC ‘07, ACM, New York, NY, USA, 2007, 7–14.