IPshield: A framework for enforcing context-aware privacy

Proceedings of the 11th USENIX Symposium on Networked Systems Design and Implementation, NSDI 2014

Volumn , Issue , 2014, Pages 143-156

  Chakraborty, Supriyo ^a   Shen, Chenguang ^a   Raghavan, Kasturi Rangan ^a   Shoukry, Yasser ^a   Millar, Matt ^a   Srivastava, Mani ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; RISK ASSESSMENT; SMARTPHONES; SYSTEMS ANALYSIS;

CONTEXT-AWARE; FINE GRAINED; MEMORY OVERHEADS; PRIVACY MECHANISMS; PRIVACY VIOLATION; SMALL REDUCTION; STATE OF THE ART; THIRD PARTIES;

DATA PRIVACY;

EID: 85047890511     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (58)

1. Android 4.3’s Hidden App Permission Manager. http://www.androidpolice.com/2013/07/25/app- ops-android- 4- 3s- hidden- app- permission- manager-control- permissions- for- individual- apps/.
2. Android Open Source Project. http://source.android.com/.
3. Android Security Overview. http://source.android.com/devices/tech/security/.
4. Apple M7 Co-Processor. http://en.wikipedia.org/wiki/ Apple_M7.
5. ipShield: A Framework For Enforcing Context-Aware Privacy. http://tinyurl.com/ipshieldgit.
6. Pausing Google Play: More Than 100,000 Android Apps May Pose Security Risks. https://www.bit9.com/download/reports/Pausing-Google-Play-October2012.pdf.
7. PDroid patch for Android Jelly Bean. http://github.com/gsbabil/PDroid-AOSP-JellyBean.
8. Protocol Buffers. https://developers.google.com/ protocol- buffers/.
9. RunKeeper. http://www.runkeeper.com/.
10. Saga Lifelogging. http://www.getsaga.com/.
11. Under the Hood: Dalvik patch for Facebook for Android. https://www.facebook.com/notes/facebookengineering/under- the- hood- dalvik- patch- for-facebook- for- android/10151345597798920.
12. AGARWAL, Y., AND HALL, M. Protectmyprivacy: Detecting and mitigating privacy leaks on ios devices using crowdsourcing. In Proceeding of the 11th Annual International Conference on Mobile Systems, Applications, and Services (2013), MobiSys’13, pp. 97–110.
13. ASONOV, D., AND AGRAWAL, R. Keyboard acoustic emanations. In Security and Privacy, 2004. Proceedings. 2004 IEEE Symposium on (2004), pp. 3–11.
14. AVIV, A. J., SAPP, B., BLAZE, M., AND SMITH, J. M. Practicality of accelerometer side channels on smartphones. In Proceedings of the 28th Annual Computer Security Applications Conference (2012), ACSAC’12, pp. 41–50.
15. BADEN, R., BENDER, A., SPRING, N., BHATTACHARJEE, B., AND STARIN, D. Persona: An online social network with user-defined privacy. In Proceedings of the ACM SIGCOMM 2009 Conference on Data Communication (2009), SIGCOMM’09, pp. 135–146.
16. BAO, L., AND INTILLE, S. S. Activity recognition from user-annotated acceleration data. Pervasive LNCS 3001 (2004), 1–17.
17. BARRERA, D., KAYACIK, H. G., VAN OORSCHOT, P. C., AND SOMAYAJI, A. A methodology for empirical analysis of permission-based security models and its application to android. In Proceedings of the 17th ACM conference on Computer and communications security (2010), ACM, pp. 73–84.
18. BERESFORD, A. R., RICE, A., SKEHIN, N., AND SOHAN, R. Mockdroid: Trading privacy for application functionality on smartphones. In Proceedings of the 12th Workshop on Mobile Computing Systems and Applications (2011), HotMobile’11, pp. 49–54.
19. BROUWERS, N., AND WOEHRLE, M. Detecting dwelling in urban environments using gps, wifi, and geolocation measurements. In Proc. 2nd Intl Workshop on Sensing Applications on Mobile Phones (2011), pp. 1–5.
20. CHAKRABORTY, S., BITOUZÉ, N., SRIVASTAVA, M., AND DOLECEK, L. Protecting data against unwanted inferences. In Information Theory Workshop (ITW), 2013 IEEE (2013), pp. 1–5.
21. CHAKRABORTY, S., RAGHAVAN, K. R., JOHNSON, M. P., AND SRIVASTAVA, M. B. A framework for context-aware privacy of sensor data on mobile systems. In Proceedings of the 14th Workshop on Mobile Computing Systems and Applications (2013), HotMobile’13, pp. 11:1–11:6.
22. CHANG, D. F. K.-H., AND CANNY, J. Ammon: A speech analysis library for analyzing affect, stress, and mental health on mobile phones. Proceedings of PhoneSense 2011 (2011).
23. CHU, D., KANSAL, A., LIU, J., AND ZHAO, F. Mobile apps: it’s time to move up to condos. HotOS.
24. ENCK, W., GILBERT, P., CHUN, B.-G., COX, L. P., JUNG, J., MCDANIEL, P., AND SHETH, A. N. Taintdroid: An information-flow tracking system for realtime privacy monitoring on smartphones. In Proceedings of the 9th USENIX Conference on Operating Systems Design and Implementation (2010), OSDI’10, pp. 1–6.
25. ENCK, W., ONGTANG, M., AND MCDANIEL, P. On lightweight mobile phone application certification. In Proceedings of the 16th ACM Conference on Computer and Communications Security (2009), CCS’09, pp. 235–245.
26. ESTRIN, D., AND SIM, I. Open mHealth Architecture: An Engine for Health Care Innovation. Science 330, 6005 (2010), 759–760.
27. FELT, A. P., CHIN, E., HANNA, S., SONG, D., AND WAGNER, D. Android permissions demystified. In Proceedings of the 18th ACM Conference on Computer and Communications Security (2011), CCS’11, pp. 627–638.
28. FELT, A. P., HA, E., EGELMAN, S., HANEY, A., CHIN, E., AND WAGNER, D. Android permissions: User attention, comprehension, and behavior. In Proceedings of the Eighth Symposium on Usable Privacy and Security (2012), SOUPS’12, pp. 3:1–3:14.
29. GENKIN, D., SHAMIR, A., AND TROMER, E. Rsa key extraction via low-bandwidth acoustic cryptanalysis. Cryptology ePrint Archive, Report 2013/857, 2013.
30. GÖTZ, M., NATH, S., AND GEHRKE, J. Maskit: Privately releasing user context streams for personalized mobile applications. In Proceedings of the 2012 ACM SIGMOD International Conference on Management of Data (2012), SIGMOD’12, pp. 289–300.
31. HAN, J., OWUSU, E., NGUYEN, L., PERRIG, A., AND ZHANG, J. Accomplice: Location inference using accelerometers on smartphones. In Communication Systems and Networks (COMSNETS), 2012 Fourth International Conference on (2012), pp. 1–9.
32. HOLAVANALLI, S., MANUEL, D., NANJUNDASWAMY, V., ROSENBERG, B., AND SHEN, F. Flow permissions for android. In Tech Report.
33. HORNYACK, P., HAN, S., JUNG, J., SCHECHTER, S., AND WETHERALL, D. These aren’t the droids you’re looking for: Retrofitting android to protect data from imperious applications. In Proceedings of the 18th ACM Conference on Computer and Communications Security (2011), CCS’11, pp. 639–652.
34. JEON, J., MICINSKI, K. K., VAUGHAN, J. A., REDDY, N., ZHU, Y., FOSTER, J. S., AND MILLSTEIN, T. Dr. android and mr. hide: Fine-grained security policies on unmodified android.
35. KIM, D. H., KIM, Y., ESTRIN, D., AND SRIVASTAVA, M. B. Sensloc: Sensing everyday places and paths using less energy. In Proceedings of the 8th ACM Conference on Embedded Networked Sensor Systems (2010), SenSys’10, pp. 43–56.
36. KÖPF, B., AND BASIN, D. An information-theoretic model for adaptive side-channel attacks. In Proceedings of the 14th ACM Conference on Computer and Communications Security (2007), CCS’07, pp. 286–296.
37. KRUMM, J. A survey of computational location privacy. Personal Ubiquitous Comput. 13, 6 (Aug. 2009), 391–399.
38. LEE, S., WONG, E. L., GOEL, D., DAHLIN, M., AND SHMATIKOV, V. πbox: A platform for privacy-preserving apps. In Proceedings of the 10th USENIX Conference on Networked Systems Design and Implementation (2013), NSDI’13, pp. 501–514.
39. LIU, B., JIANG, Y., SHA, F., AND GOVINDAN, R. Cloud-enabled privacy-preserving collaborative learning for mobile sensing. In Proceedings of the 10th ACM Conference on Embedded Network Sensor Systems (2012), Sensys’12, pp. 57–70.
40. LU, H., FRAUENDORFER, D., RABBI, M., MAST, M. S., CHITTARANJAN, G. T., CAMPBELL, A. T., GATICA-PEREZ, D., AND CHOUDHURY, T. Stresssense: Detecting stress in unconstrained acoustic environments using smartphones. In Proceedings of the 2012 ACM Conference on Ubiquitous Computing (2012), Ubicomp’12, pp. 351–360.
41. LU, H., PAN, W., LANE, N. D., CHOUDHURY, T., AND CAMPBELL, A. T. Soundsense: Scalable sound sensing for people-centric applications on mobile phones. In Proceedings of the 7th International Conference on Mobile Systems, Applications, and Services (2009), MobiSys’09, pp. 165–178.
42. MARQUARDT, P., VERMA, A., CARTER, H., AND TRAYNOR, P. (sp)iphone: Decoding vibrations from nearby keyboards using mobile phone accelerometers. In Proceedings of the 18th ACM Conference on Computer and Communications Security (2011), CCS’11, pp. 551–562.
43. MILUZZO, E., VARSHAVSKY, A., BALAKRISHNAN, S., AND CHOUDHURY, R. R. Tapprints: Your finger taps have fingerprints. In Proceedings of the 10th International Conference on Mobile Systems, Applications, and Services (2012), MobiSys’12, pp. 323–336.
44. MUN, M., HAO, S., MISHRA, N., SHILTON, K., BURKE, J., ESTRIN, D., HANSEN, M., AND GOVINDAN, R. Personal data vaults: A locus of control for personal data streams. In Proceedings of the 6th International COnference (2010), Co-NEXT’10, pp. 17:1–17:12.
45. NAUMAN, M., KHAN, S., AND ZHANG, X. Apex: extending android permission model and enforcement with user-defined runtime constraints. In Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security (2010), ACM, pp. 328–332.
46. NIRJON, S., DICKERSON, R. F., ASARE, P., LI, Q., HONG, D., STANKOVIC, J. A., HU, P., SHEN, G., AND JIANG, X. Auditeur: A mobile-cloud service platform for acoustic event detection on smartphones. In Proceeding of the 11th Annual International Conference on Mobile Systems, Applications, and Services (2013), MobiSys’13, pp. 403–416.
47. PARATE, A., CHIU, M.-C., GANESAN, D., AND MARLIN, B. M. Leveraging graphical models to improve accuracy and reduce privacy risks of mobile sensing. In Proceeding of the 11th Annual International Conference on Mobile Systems, Applications, and Services (2013), MobiSys’13, pp. 83–96.
48. PARK, J.-G., PATEL, A., CURTIS, D., TELLER, S., AND LEDLIE, J. Online pose classification and walking speed estimation using handheld devices. In Proceedings of the 2012 ACM Conference on Ubiquitous Computing (2012), UbiComp ’12, pp. 113–122.
49. PLARRE, K., RAIJ, A., HOSSAIN, S., ALI, A., NAKAJIMA, M., AL’ABSI, M., ERTIN, E., KAMARCK, T., KUMAR, S., SCOTT, M., SIEWIOREK, D., SMAILAGIC, A., AND WITTMERS, L. Continuous inference of psychological stress from sensory measurements collected in the natural environment. In Information Processing in Sensor Networks (IPSN), 2011 10th International Conference on (2011), pp. 97–108.
50. RACHURI, K. K., MUSOLESI, M., MASCOLO, C., RENTFROW, P. J., LONGWORTH, C., AND AUCINAS, A. Emotionsense: a mobile phones based adaptive platform for experimental social psychology research. In Proceedings of the 12th ACM international conference on Ubiquitous computing (2010), pp. 281–290.
51. RAHMAN, M. M., ALI, A. A., PLARRE, K., AL’ABSI, M., ERTIN, E., AND KUMAR, S. mconverse: Inferring conversation episodes from respiratory measurements collected in the field. In Proceedings of the 2Nd Conference on Wireless Health (2011), WH’11, pp. 10:1–10:10.
52. RAIJ, A., GHOSH, A., KUMAR, S., AND SRIVASTAVA, M. Privacy risks emerging from the adoption of innocuous wearable sensors in the mobile environment. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems (2011), CHI’11, pp. 11–20.
53. REDDY, S., MUN, M., BURKE, J., ESTRIN, D., AND HANSEN, MARK A ND SRIVASTAVA, M. Using mobile phones to determine transportation modes. ACM Trans. Sen. Netw. 6, 2 (Mar. 2010), 13:1–13:27.
54. SONG, D. X., WAGNER, D., AND TIAN, X. Timing analysis of keystrokes and timing attacks on ssh. In Proceedings of the 10th Conference on USENIX Security Symposium - Volume 10 (2001), SSYM’01, pp. 25–25.
55. THURM, S., AND KANE, Y. Your apps are watching you. The Wall Street Journal, 2012.
56. TOOTOONCHIAN, A., SAROIU, S., GANJALI, Y., AND WOL-MAN, A. Lockr: Better privacy for social networks. In Proceedingsofthe5thInternationalConferenceonEmergingNetworking Experiments and Technologies (2009), CoNEXT’09, pp. 169–180.
57. VUAGNOUX, M., AND PASINI, S. Compromising electromagnetic emanations of wired and wireless keyboards. In Proceedings of the 18th Conference on USENIX Security Symposium (2009), SSYM’09, pp. 1–16.
58. ZHAN, A., CHANG, M., CHEN, Y., AND TERZIS, A. Accurate caloric expenditure of bicyclists using cellphones. In Proceedings of the 10th ACM Conference on Embedded Network Sensor Systems (2012), SenSys’12, pp. 71–84.