Delivering secure applications on commercial mobile devices

Gudeth, Kevin; Pirretti, Matthew; Hoeper, Katrin; Buskey, Ron

doi:10.1145/2046614.2046622

Cited by 20 publications

(10 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…System-level virtualization of mobile devices has been proposed and implemented by both researchers [5,8,3] and commercial entities [6,12]. We agree with their conclusions that virtualization improves the security and manageability of mobile computing, and add our insight that virtualization would also enable seamless switching between devices.…”

Section: Related Worksupporting

confidence: 70%

“…This paper proposes VMsync, a system for synchronizing the state of live virtual machines (VMs) among mobile devices. System-level VMs have been widely proposed to improve the security, manageability, and other aspects of mobile computing [3,5,6,8,12]. In the context of device switching, VMs encapsulate both data and computation state for a complete operating system and all its applications.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Towards synchronization of live virtual machines among mobile devices

Bickford

Cáceres

2013

Proceedings of the 14th Workshop on Mobile Computing Systems and Applications

View full text Add to dashboard Cite

The mobile computing experience would improve if users could switch seamlessly from one device to another, with both data and computation state preserved across the switch without apparent delay. This paper proposes VMsync, a system for synchronizing the state of live virtual machines (VMs) among mobile devices. VMsync seeks to incrementally transfer changes in an active VM on one device to standby VMs in other devices, so as to maintain a consistent VM image and minimize switching latency. However, constraints of the mobile environment make these goals difficult to achieve and raise many research questions. We present our preliminary design for VMsync and a feasibility study aimed at determining how much data would need to be transferred under different mobile workloads and synchronization policies. For example, through experiments with a Xen VM running Android and playing a YouTube video, we show that sending dirty memory pages transfers 3 times more data than sending only the bytes that actually changed in those pages. Overall, we conclude that VMsync is a feasible approach deserving of further research.

show abstract

Section: Related Worksupporting

confidence: 70%

Section: Introductionmentioning

confidence: 99%

Towards synchronization of live virtual machines among mobile devices

Bickford

Cáceres

2013

Proceedings of the 14th Workshop on Mobile Computing Systems and Applications

View full text Add to dashboard Cite

show abstract

“…We did not expect this result, since the literature is abundant of solutions presenting hypervisors as a promising approach to improve system security [7,13,15]. In this paper, we showed that this approach inherently suffers from three main shortcomings.…”

Section: Discussionmentioning

confidence: 99%

“…For instance, the case of TrustZone is presented in [27] and that of bare-metal hypervisors is presented in [13]. Too often, authors assert the superiority of their solution without explicitly stating their evaluation criteria.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

The Dual-Execution-Environment Approach: Analysis and Comparative Evaluation

Sabt

Achemlal

Bouabdallah

2015

ICT Systems Security and Privacy Protection

View full text Add to dashboard Cite

Abstract. The dual-execution-environment approach (dual-EE) is a trusted model that was defined to allow mobile smart devices to guarantee tamper-resistant execution for highly sensitive applications. Although various solutions implementing dual-EE have been proposed in the literature, this model has not been formalized yet. In this paper, we revisit the dual-EE approach and propose a theoretical framework to systematize the design of dual-EE solutions regarding well-established primitives defined in the Multiple Independent Levels of Security (MILS) architecture. We provide a general classification of the different dual-EE proposals based on their isolation properties. We introduce a comparative framework allowing dual-EE solutions to be evaluated across a common set of criteria. The relevance of our framework is examined by applying it on three technologies, each one represents one category in our classification. Results are consistent and explain some hidden and unexpected properties of each technology. For instance, we find that bare-metal hypervisors are ill-adapted to provide high assurance security even though they might improve the overall security level of the system.

show abstract

Bibliography

2015

Security Intelligence

View full text Add to dashboard Cite

Delivering secure applications on commercial mobile devices

Cited by 20 publications

References 16 publications

Towards synchronization of live virtual machines among mobile devices

Towards synchronization of live virtual machines among mobile devices

The Dual-Execution-Environment Approach: Analysis and Comparative Evaluation

Bibliography

Contact Info

Product

Resources

About