Implementing and Optimizing an Encryption Filesystem on Android

Wang, Zhaohui; Murmuria, Rahul; Stavrou, Angelos

doi:10.1109/mdm.2012.31

Cited by 24 publications

(9 citation statements)

References 18 publications

(17 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…These policies are specified with Can Persist to Device, Data Encryption Level, and Can Persist to Cloud. While both iOS and Android offer disk encryption [14], [15], not all applications may utilize encryption. The goal with this policy is to allow consumers the ability to specify how data should be encrypted.…”

Section: Data Persistencementioning

confidence: 99%

SPE: Security and Privacy Enhancement Framework for Mobile Devices

Krupp

Sridhar

Zhao

2017

IEEE Trans. Dependable and Secure Comput.

View full text Add to dashboard Cite

In this paper, we present a security and privacy enhancement (SPE) framework for unmodified mobile operating systems. SPE introduces a new layer between the application and the operating system and does not require a device be jailbroken or utilize a custom operating system. We utilize an existing ontology designed for enforcing security and privacy policies on mobile devices to build a policy that is customizable. Based on this policy, SPE provides enhancements to native controls that currently exist on the platform for privacy and security sensitive components. SPE allows access to these components in a way that allows the framework to ensure the application is truthful in its declared intent and ensure that the user's policy is enforced. In our evaluation we verify the correctness of the framework and the computing impact on the device. Additionally, we discovered security and privacy issues in several open source applications by utilizing the SPE Framework. From our findings, if SPE is adopted by mobile operating systems producers, it would provide consumers and businesses the additional privacy and security controls they demand and allow users to be more aware of security and privacy issues with applications on their devices.

show abstract

Section: Data Persistencementioning

confidence: 99%

SPE: Security and Privacy Enhancement Framework for Mobile Devices

Krupp

Sridhar

Zhao

2017

IEEE Trans. Dependable and Secure Comput.

View full text Add to dashboard Cite

show abstract

“…Wang et al also developed an alternative file systembased encryption scheme in [13] using Filesystem in Userspace (FUSE) kernel support, EncFS binaries, and libfuse. While the others claim the installation of their proposed encrypted file system is easy to install, it does require both rooting an Android device and flashing with a customized kernel, making adoption by a large market unlikely.…”

Section: B Full Disk Encryptionmentioning

confidence: 99%

“…As noted in [13], encrypting an entire partition can be noticeably detrimental to system performance and resource usage and may, in the case of larger disks, require a significant amount of setup time. Moreover, full disk encryption will encrypt all data on a device -even unused or garbage bytes -and does not provide the user fine-tune controls over what is to be encrypted.…”

Section: B Full Disk Encryptionmentioning

confidence: 99%

A Lightweight Encryption and Secure Protocol for Smartphone Cloud

Zegers

Chang

Park

et al. 2015

2015 IEEE Symposium on Service-Oriented System Engineering

View full text Add to dashboard Cite

User data on mobile devices are always transferred into Cloud for flexible and location-independent access to services and resources. The issues of data security and privacy data have been often reverted to contractual partners and trusted third parties. As a matter of fact, to project data, data encryption and user authentication are fundamental requirements between the mobile devices and the Cloud before a data transfer. However, due to limited resources of the smartphones and the unawareness of security from users, data encryption has been the last priority in mobile devices, and the authentication between two entities always depends on a trusted third party. In this paper, we propose a lightweight encryption algorithm and a security handshaking protocol for use specifically between in mobile devices and in Cloud, with the intent of securing data on the user side before it is migrated to cloud storages. The proposed cryptographic scheme and security protocol make use of unique device specific identifiers and user supplied credentials. It aims to achieve a usersoriented approach for Smartphone Cloud. Through experiments, we demonstrated that the proposed cryptographic scheme requires less power consumption on mobile devices.

show abstract

“…Implementation and Performance Please refer to our full paper [3] for performance details and optimizations.…”

Section: Encfs For Androidmentioning

confidence: 99%

“…In this paper, we describe the rationale behind some of our efforts [1][2][3] to secure the hardware and software on Android devices used in adversarial environments. Our efforts are data-centric and is multi-pronged as depicted in Figure 1.…”

Section: Introductionmentioning

confidence: 99%

Exposing Security Risks for Commercial Mobile Devices

Wang

Johnson

Murmuria

et al. 2012

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

Abstract. Recent advances in the hardware capabilities of mobile handheld devices have fostered the development of open source operating systems and a wealth of applications for mobile phones and table devices. This new generation of smart devices, including iPhone and Google Android, are powerful enough to accomplish most of the user tasks previously requiring a personal computer. Moreover, mobile devices have access to Personally Identifiable Information (PII) including a full suite of location services, camera, microphone, among others. In this paper, we discuss the cyber threats that stem from these new smart device capabilities and the online application markets for mobile devices. These threats include malware, data exfiltration, exploitation through USB, and user and data tracking. We will present the ongoing GMU efforts to defend against or mitigate the impact of attacks against mobile devices. Our approaches involve analyzing the source code and binaries of mobile applications, hardening the device by using Kernel-level network and data encryption, and controlling the communication mechanisms for synchronizing the user contents with computers and other phones. We will also explain the enhanced difficulties in dealing with these security issues when the end-goal is to deploy security-enhanced smart phones into military and tactical scenarios. The talk will conclude with a discussion of our current and future research directions.

show abstract

Implementing and Optimizing an Encryption Filesystem on Android

Cited by 24 publications

References 18 publications

SPE: Security and Privacy Enhancement Framework for Mobile Devices

SPE: Security and Privacy Enhancement Framework for Mobile Devices

A Lightweight Encryption and Secure Protocol for Smartphone Cloud

Exposing Security Risks for Commercial Mobile Devices

Contact Info

Product

Resources

About