A Security Monitoring Framework for Mobile Devices

Abstract

Quite often, organizations are confronted with the burden of managing mobile device assets, requiring control over installed applications, security, usage profiles or customization options. From this perspective, the emergence of the Bring Your Own Device (BYOD) trend has aggravated the situation, making it difficult to achieve an adequate balance between corporate regulations, freedom of usage and device heterogeneity. Moreover, device and information protection on mobile ecosystems are quite different from securing other device assets such as laptops or desktops, due to their specific characteristics and limitations—quite often, the resource overhead associated with specific security mechanisms is more important for mobile devices than conventional computing platforms, as the former frequently have comparatively less computing capabilities and more strict power management policies. This paper presents an intrusion and anomaly detection framework specifically designed for managed mobile device ecosystems, that is able to integrate into mobile device and management frameworks for complementing conventional intrusion detection systems. In addition to presenting the reference architecture for the proposed framework, several implementation aspects are also analyzed, based on the lessons learned from developing a proof-of-concept prototype that was used for validation purposes.

Digital banking fortification: a real-time isolation forest architecture for detecting online transaction fraud

“…The Lambda architecture provides a means for dealing with vast amounts of data that uses a hybrid strategy to enable interaction with stream processing and batch processing approaches [30,31]. The lambda structure is made up of three layers: (1) Data processing in batches for precompiling vast sets of information, (2) real-time or speed computing to reduce latencies through performing real-time analyses as data comes, and (3) the serving layer that allows to reply to inquiries, connecting with inquiries, and providing outcomes of the computations.…”

Systematic Literature Review on Security Access Control Policies and Techniques Based on Privacy Requirements in a BYOD Environment: State of the Art and Future Directions

“…To evaluate the ability to block unwanted application functions selectively. Overhead and latency [85] Attack detection.…”

Forecast Model Update Based on a Real-Time Data Processing Lambda Architecture for Estimating Partial Discharges in Hydrogenerator

“…In fact, lambda architecture is the state-of-the-art, real-time data processing technique [ 29 ]. However, many works on this topic are dedicated to the theoretical aspects of this architecture [ 9 , 30 ], with few recent real applications such as in E-Commerce Analytics [ 31 ] and intrusion and anomaly detection framework [ 32 ]. Authors in [ 7 ], for example, proposed a platform based on lambda architecture to accelerate automatic machine maintenance, but the application in a real situation was indicated as a future proposal of the work.…”