Πbox: A platform for privacy-preserving apps

Proceedings of the 10th USENIX Symposium on Networked Systems Design and Implementation, NSDI 2013

Volumn , Issue , 2013, Pages 501-514

  Lee, Sangmin ^a   Wong, Edmund L ^a   Goel, Deepak ^a   Dahlin, Mike ^a   Shmatikov, Vitaly ^a  

^a UNIVERSITY OF TEXAS AT AUSTIN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DIFFERENTIAL PRIVACIES; NEW APPLICATIONS; PRIVACY PRESERVING; PROTOTYPE IMPLEMENTATIONS; THEORETICAL ALGORITHMS; USER PRIVACY;

SYSTEMS ANALYSIS;

EID: 85076688797     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (62)

1. M. S. Alvim, M. E. Andrés, K. Chatzikokolakis, P. Degano, and C. Palamidessi. Differential privacy: On the trade-off between utility and information leakage. CoRR, abs/1103.5188, 2011.
2. Android malware promises video while stealing contacts. http://blogs.mcafee.com/mcafee-labs/android-malware-promises -video-while-stealing-contacts.
3. J. Andrus, C. Dall, A. V. Hof, O. Laadan, and J. Nieh. Cells: A virtual mobile smartphone architecture. In SOSP, 2011.
4. Google App Engine. https://developers.google.com/appengine.
5. M. Backes, A. Kate, M. Maffei, and K. Pecina. Obliviad: Provably secure and practical online behavioral advertising. In S&P, 2012.
6. G. Barthe and B. Kopf. Information-theoretic bounds for differentially private mechanisms. In CSF, 2011.
7. R. Bhaskar, S. Laxman, A. Smith, and A. Thakurta. Discovering frequent patterns in sensitive data. In KDD, 2010.
8. J. A. Calandrino, A. Kilzer, A. Narayanan, E. W. Felten, and V. Shmatikov. “You might also like:” privacy risks of collaborative filtering. In S&P, 2011.
9. R. Chen, A. Reznichenko, P. Francis, and J. Gehrke. Towards statistical queries over distributed private user data. In NSDI, 2012.
10. J. Chow, B. Pfaff, T. Garfinkel, K. Christopher, and M. Rosenblum. Understanding data lifetime via whole system simulation. In USENIX Security, 2004.
11. Cloud computing security policies, procedures lacking. http://www.crn.com/news/security/224201359/cloud-computing-security -policies-procedures-lacking.htm.
12. D. E. Denning. A lattice model of secure information flow. Communication of the ACM, 19(5), May 1976.
13. I. Dinur and K. Nissim. Revealing information while preserving privacy. In PODS, 2003.
14. C. Dwork. Differential privacy. In ICALP, 2006.
15. C. Dwork, F. Mcsherry, K. Nissim, and A. Smith. Calibrating noise to sensitivity in private data analysis. In TCC, 2006.
16. C. Dwork, M. Naor, T. Pitassi, and G. N. Rothblum. Differential privacy under continual observation. In STOC, 2010.
17. J. Edwards. How Microsoft's 'Do Not Track' policy is a mortal threat to ad exchanges like Facebook's. http://www.businessinsider.com/microsofts-dnt-threatens -facebook-2012-9.
18. W. Enck, P. Gilbert, B.-G. Chun, L. P. Cox, J. Jung, P. McDaniel, and A. N. Sheth. TaintDroid: An information-flow tracking system for realtime privacy monitoring on smartphones. In OSDI, 2010.
19. A. P. Felt, E. Chin, S. Hanna, D. Song, and D. Wagner. Android permissions demystified. In CCS 2011.
20. A. P. Felt, E. Ha, S. Egelman, A. Haney, E. Chin, and D. Wagner. Android permissions: User attention, comprehension, and behavior. In SOUPS, 2012.
21. D. B. Giffin, A. Levy, D. Stefan, D. Terei, D. Mazières, J. Mitchell, and A. Russo. Hails: Protecting data privacy in untrusted web applications. In OSDI, 2012.
22. S. Guha, B. Cheng, and P. Francis. Privad: Practical privacy in online advertising. In NSDI, 2011.
23. HBase. http://hbase.apache.org.
24. A. Ho, M. Fetterman, C. Clark, A. Warfield, and S. Hand. Practical taint-based protection using demand emulation. In EuroSys, 2006.
25. P. Hornyack, S. Han, J. Jung, S. Schechter, and D. Wetherall. These aren't the droids you're looking for: Retrofitting Android to protect data from imperious applications. In CCS, 2011.
26. J. Howell, B. Parno, and J. R. Douceur. Embassies: Radically refactoring the web. In NSDI, 2013.
27. W.-M. Hu. Reducing timing channels with fuzzy time. In S&P, 1991.
28. IBM bans Dropbox, Siri and rival cloud tech at work. http://www.theregister.co.uk/2012/05/25/ibm_bans_dropbox_siri.
29. Jetty. http://www.eclipse.org/jetty.
30. A. Korolova. Privacy violations using microtargeted ads: A case study. Journal of Privacy and Confidentiality, 3(1), 2011.
31. M. Krohn and E. Tromer. Noninterference for a practical DIFC-based operating system. In S&P, 2009.
32. M. Krohn, A. Yip, M. Brodsky, N. Cliffer, M. F. Kaashoek, E. Kohler, and R. Morris. Information flow control for standard OS abstractions. In SOSP, 2007.
33. B. W. Lampson. A note on the confinement problem. Commun. ACM, 16(10), Oct. 1973.
34. App sandbox in depth. http://developer.apple.com/library/mac/ #documentation/Security/Conceptual/ AppSandboxDesignGuide/AppSandboxInDepth/ AppSandboxInDepth.html.
35. F. McSherry. Privacy integrated queries: An extensible platform for privacy-preserving data analysis. Commun. ACM, 53(9), Sept. 2010.
36. J. Mick. Android wallpaper app stole scores of users' data, sent it to China. http://www.dailytech.com/Android+Wallpaper+ App+Stole+Scores+of+Users+Data+Sent+ it+to+China/article19200.htm.
37. S. Motiee, K. Hawkey, and K. Beznosov. Do Windows users follow the principle of least privilege? Investigating User Account Control practices. In SOUPS, 2010.
38. A. C. Myers and B. Liskov. A decentralized model for information flow control. In SOSP, 1997.
39. NativeClient - native code for web apps. http://code.google.com/p/nativeclient.
40. OpenStreetMap. http://www.openstreetmap. org.
41. OsmAnd. http://osmand.net, https://play.google.com/store/apps/details? id=net.osmand&hl=en.
42. B. Parno, J. M. McCune, D. Wendlandt, D. G. Andersen, and A. Perrig. CLAMP: Practical prevention of large-scale data leaks. In S&P, 2009.
43. iOS social apps leak contact data. http://www.informationweek.com/news/ security/privacy/232600490.
44. R. A. Popa, C. M. S. Redfield, N. Zeldovich, and H. Balakrishnan. CryptDB: Protecting confidentiality with encrypted query processing. In SOSP, 2011.
45. Real-time bidding in the United States and Western Europe, 2010-1015. http://info.pubmatic.com/rs/pubmatic/images/IDC_Real-Time% 20Bidding_US_Western%20Europe_Oct2011. pdf.
46. A. Reznichenko, S. Guha, and P. Francis. Auctions in do-not-track compliant internet advertising. In CCS, 2011.
47. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage. Hey, you, get off of my cloud: Exploring information leakage in third-party compute clouds. In CCS, 2009.
48. I. Roy, S. Setty, A. Kilzer, V. Shmatikov, and E. Witchel. Airavat: Security and privacy for MapReduce. In NSDI, 2010.
49. Saskatchewan-HTTP - seven months of HTTP logs from the University of Saskatchewan WWW Server. http://ita.ee.lbl.gov/html/contrib/Sask-HTTP.html.
50. M. Seaborn. Plash: Tools for practical least privilege. http://plash.beasts.org.
51. ServeStream. http://sourceforge.net/projects/servestream, https://play.google.com/store/apps/details?id=net. sourceforge.servestream&hl=en.
52. K. Singh, S. Bhola, and W. Lee. xBook: Redesigning privacy control in social networking platforms. In USENIX Security, 2009.
53. CMU Sphinx - speech recognition toolkit. http://cmusphinx.sourceforge.net.
54. 300,000 mobile apps stealing personal data. http://www.itproportal.com/2010/07/29/300000-mobile-apps-stealing -personal-data.
55. M. Tiwari, P. Mohan, A. Osheroff, H. Alkaff, E. Shi, E. Love, D. Song, and K. Asanović. Context-centric security. In HotSec, 2012.
56. Twitter apologizes for squirreling away iPhone user data. http://www.csmonitor.com/Innovation/Horizons/2012/0216/Twitter -apologizes-for-squirreling-away -iPhone-user-data.
57. B. Viswanath, E. Kiciman, and S. Saroiu. Keeping information safe from social networking apps. In WOSN, 2012.
58. VMware Horizon Mobile. https://blogs.vmware.com/euc/2012/08/ vmware-horizon-mobile-on-ios.html.
59. 1998 World Cup website access logs. http://ita.ee.lbl.gov/html/contrib/WorldCup.html.
60. N. Zeldovich, S. Boyd-Wickizer, E. Kohler, and D. Mazières. Making information flow explicit in HiS-tar. In OSDI, 2006.
61. F. Zhang, J. Chen, H. Chen, and B. Zang. CloudVisor: Retrofitting protection of virtual machines in multi-tenant cloud with nested virtualization. In SOSP, 2011.
62. Q. Zhang, J. McCullough, J. Ma, N. Schear, M. Vrable, A. Vahdat, A. C. Snoeren, G. M. Voelker, and S. Savage. Neon: System support for derived data management. In VEE, 2010.