Towards a Trusted Mobile Desktop

Selhorst, Marcel; Stüble, Christian; Feldmann, Florian; Gnaida, Utz

doi:10.1007/978-3-642-13869-0_6

Cited by 19 publications

(11 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This approach has been ported to the mobile area [33,3,39]. Although virtualization provides strong isolation, it duplicates the entire Android software stack, which renders those approaches quite heavy-weight in consideration of the scarce battery life of smartphones.…”

Section: Virtualizationmentioning

confidence: 99%

Practical and lightweight domain isolation on Android

Bugiel

Davi

Dmitrienko

et al. 2011

Proceedings of the 1st ACM Workshop on Security and Privacy in Smartphones and Mobile Devices

139

View full text Add to dashboard Cite

In this paper, we introduce a security framework for practical and lightweight domain isolation on Android to mitigate unauthorized data access and communication among applications of different trust levels (e.g., private and corporate). We present the design and implementation of our framework, TrustDroid , which in contrast to existing solutions enables isolation at different layers of the Android software stack:(1) at the middleware layer to prevent inter-domain application communication and data access, (2) at the kernel layer to enforce mandatory access control on the file system and on Inter-Process Communication (IPC) channels, and (3) at the network layer to mediate network traffic. For instance, (3) allows network data to be only read by a particular domain, or enables basic context-based policies such as preventing Internet access by untrusted applications while an employee is connected to the company's network.Our approach accurately addresses the demands of the business world, namely to isolate data and applications of different trust levels in a practical and lightweight way. Moreover, our solution is the first leveraging mandatory access control with TOMOYO Linux on a real Android device (Nexus One). Our evaluation demonstrates that TrustDroid only adds a negligible overhead, and in contrast to contemporary full virtualization, only minimally affects the battery's life-time.

show abstract

Section: Virtualizationmentioning

confidence: 99%

Practical and lightweight domain isolation on Android

Bugiel

Davi

Dmitrienko

et al. 2011

Proceedings of the 1st ACM Workshop on Security and Privacy in Smartphones and Mobile Devices

139

View full text Add to dashboard Cite

show abstract

“…We assume that the software on the handheld is trustworthy and that no malicious software components are installed. Related study that investigates the design of a trustworthy handheld device is presented by, e.g., Selhorst et al [38]. Furthermore, we assume that the handheld is preloaded with the public key certificate of the TrustCenter.…”

Section: Assumptionsmentioning

confidence: 99%

User-centric privacy awareness in video surveillance

Winkler

Rinner

2011

Multimedia Systems

View full text Add to dashboard Cite

Especially in urban environments, video cameras have become omnipresent. Supporters of video surveillance argue that it is an excellent tool for many applications including crime prevention and law enforcement. While this is certainly true, it must be questioned if sufficient efforts are made to protect the privacy of monitored people. Privacy concerns are often set aside when compared to public safety and security. One reaction to this situation is emerging: community-based efforts where citizens register and map surveillance cameras in their environment. Our study is inspired by this idea and proposes a user-specific and location-aware privacy awareness system. Using conventional smartphones, users not only can contribute to the camera maps, but also use community-collected data to be alerted of potential privacy violations. In our model, we define different levels of privacy awareness. For the highest level, we present a mechanism that allows users to directly interact with specially designed, trustworthy cameras. These cameras provide direct feedback about the tasks that are executed by the camera and how privacy-sensitive data is handled. A hardware security chip that is integrated into the camera is used to ensure authenticity, integrity and freshness of the provided camera status information.

show abstract

“…In principle, the hardware and software resources needed for user interaction in a TZ-enabled device (e.g., access to the display buffer or the touchscreen input events) can be temporarily reserved for the secure world. A security indicator, such as a colored bar on the top of the screen [23] or a dedicated LED [1] can be used to inform the user about the type of the application he is communicating with (the correct trusted application or a normal world application). However, current smartphones typically do not implement such division of user-interface resources.…”

Section: Password Enrollmentmentioning

confidence: 99%

Secure enrollment and practical migration for mobile trusted execution environments

Marforio

Karapanos

Soriente

et al. 2013

Proceedings of the Third ACM Workshop on Security and Privacy in Smartphones &Amp; Mobile Devices

View full text Add to dashboard Cite

Smartphones can implement various security services from mobile banking to security tokens used for physical access control. System-wide trusted execution environments (TEEs), like ARM TrustZone, allow implementation of these services that withstand malware and operating system compromise. While researchers and developers have focused on secure storage and processing of credentials on such mobile TEEs, secure and practical bootstrapping of security services has been overlooked. The goal of this paper is to put forward the problem of secure user enrollment in the context of mobile system-wide TEEs. We explain why user identity binding to a mobile device is challenging on current smartphone platforms, and argue that current mobile device architectures do not facilitate secure enrollment and migration for such TEEs. We outline possible architecture changes that would enable the realization of secure and practical enrollment, and thus enable more widespread secure deployment of various mobile security services.

show abstract

Towards a Trusted Mobile Desktop

Cited by 19 publications

References 13 publications

Practical and lightweight domain isolation on Android

Practical and lightweight domain isolation on Android

User-centric privacy awareness in video surveillance

Secure enrollment and practical migration for mobile trusted execution environments

Contact Info

Product

Resources

About