A distributed android security framework

Benjamin Andow; Haodong Wang

doi:10.1109/SmartCity.2015.207

A distributed android security framework

Benjamin Andow
, Haodong Wang

Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

3 Scopus citations

Abstract

The current security models on mobile devices do not provide the level of protection required to handle sensitive data, such as protected healthcare information. In this paper, we introduce a Distributed Android Security Framework (DASF). DASF is a custom security framework for Android-based mobile devices that allows the enforcement of dynamic security policies on an application's privileges and sensitive data. DASF allows servers to dynamically impose security policies by using an application-layer message protocol implemented in the system. The security policies enforced by DASF enables system-wide privilege restrictions on untrustworthy applications and sensitive data. Ultimately, DASF allows organizations (i.e., data owners) to dynamically dictate the security policies enforced by the system, and retain control of the sensitive data they send to the device. We implement a prototype of DASF on Android Jellybean, and perform a security and performance evaluation. We show the DASF can defeat a number of security threats associated with using mobile devices in the healthcare industry, and imposes a reasonable performance overhead.

Original language	English
Title of host publication	Proceedings - 2015 IEEE International Conference on Smart City, SmartCity 2015, Held Jointly with 8th IEEE International Conference on Social Computing and Networking, SocialCom 2015, 5th IEEE International Conference on Sustainable Computing and Communications, SustainCom 2015, 2015 International Conference on Big Data Intelligence and Computing, DataCom 2015, 5th International Symposium on Cloud and Service Computing, SC2 2015
Editors	Xingang Liu, Peicheng Wang, Yufeng Wang, Mianxiong Dong, Robert C. H. Hsu, Feng Xia, Yuhui Deng
Place of Publication	usa
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	1045-1052
Number of pages	8
ISBN (Electronic)	9781509018932
DOIs	https://doi.org/10.1109/SmartCity.2015.207
State	Published - Jan 1 2015
Event	IEEE International Conference on Smart City, SmartCity 2015 - Chengdu, China Duration: Dec 19 2015 → Dec 21 2015

Conference

Conference	IEEE International Conference on Smart City, SmartCity 2015
Country/Territory	China
City	Chengdu
Period	12/19/15 → 12/21/15

Keywords

Access Control
Android
Distributed
Security

Access to Document

10.1109/SmartCity.2015.207

Cite this

Andow, B., & Wang, H. (2015). A distributed android security framework. In X. Liu, P. Wang, Y. Wang, M. Dong, R. C. H. Hsu, F. Xia, & Y. Deng (Eds.), Proceedings - 2015 IEEE International Conference on Smart City, SmartCity 2015, Held Jointly with 8th IEEE International Conference on Social Computing and Networking, SocialCom 2015, 5th IEEE International Conference on Sustainable Computing and Communications, SustainCom 2015, 2015 International Conference on Big Data Intelligence and Computing, DataCom 2015, 5th International Symposium on Cloud and Service Computing, SC2 2015 (pp. 1045-1052). Article 7463862 Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/SmartCity.2015.207

Andow, Benjamin ; Wang, Haodong. / A distributed android security framework. Proceedings - 2015 IEEE International Conference on Smart City, SmartCity 2015, Held Jointly with 8th IEEE International Conference on Social Computing and Networking, SocialCom 2015, 5th IEEE International Conference on Sustainable Computing and Communications, SustainCom 2015, 2015 International Conference on Big Data Intelligence and Computing, DataCom 2015, 5th International Symposium on Cloud and Service Computing, SC2 2015. editor / Xingang Liu ; Peicheng Wang ; Yufeng Wang ; Mianxiong Dong ; Robert C. H. Hsu ; Feng Xia ; Yuhui Deng. usa : Institute of Electrical and Electronics Engineers Inc., 2015. pp. 1045-1052

@inproceedings{213721e7d6bd48ed924a5bd77da31e98,

title = "A distributed android security framework",

abstract = "The current security models on mobile devices do not provide the level of protection required to handle sensitive data, such as protected healthcare information. In this paper, we introduce a Distributed Android Security Framework (DASF). DASF is a custom security framework for Android-based mobile devices that allows the enforcement of dynamic security policies on an application's privileges and sensitive data. DASF allows servers to dynamically impose security policies by using an application-layer message protocol implemented in the system. The security policies enforced by DASF enables system-wide privilege restrictions on untrustworthy applications and sensitive data. Ultimately, DASF allows organizations (i.e., data owners) to dynamically dictate the security policies enforced by the system, and retain control of the sensitive data they send to the device. We implement a prototype of DASF on Android Jellybean, and perform a security and performance evaluation. We show the DASF can defeat a number of security threats associated with using mobile devices in the healthcare industry, and imposes a reasonable performance overhead.",

keywords = "Access Control, Android, Distributed, Security",

author = "Benjamin Andow and Haodong Wang",

year = "2015",

month = jan,

day = "1",

doi = "10.1109/SmartCity.2015.207",

language = "English",

pages = "1045--1052",

editor = "Xingang Liu and Peicheng Wang and Yufeng Wang and Mianxiong Dong and Hsu, \{Robert C. H.\} and Feng Xia and Yuhui Deng",

booktitle = "Proceedings - 2015 IEEE International Conference on Smart City, SmartCity 2015, Held Jointly with 8th IEEE International Conference on Social Computing and Networking, SocialCom 2015, 5th IEEE International Conference on Sustainable Computing and Communications, SustainCom 2015, 2015 International Conference on Big Data Intelligence and Computing, DataCom 2015, 5th International Symposium on Cloud and Service Computing, SC2 2015",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

note = "IEEE International Conference on Smart City, SmartCity 2015 ; Conference date: 19-12-2015 Through 21-12-2015",

}

Andow, B & Wang, H 2015, A distributed android security framework. in X Liu, P Wang, Y Wang, M Dong, RCH Hsu, F Xia & Y Deng (eds), Proceedings - 2015 IEEE International Conference on Smart City, SmartCity 2015, Held Jointly with 8th IEEE International Conference on Social Computing and Networking, SocialCom 2015, 5th IEEE International Conference on Sustainable Computing and Communications, SustainCom 2015, 2015 International Conference on Big Data Intelligence and Computing, DataCom 2015, 5th International Symposium on Cloud and Service Computing, SC2 2015., 7463862, Institute of Electrical and Electronics Engineers Inc., usa, pp. 1045-1052, IEEE International Conference on Smart City, SmartCity 2015, Chengdu, China, 12/19/15. https://doi.org/10.1109/SmartCity.2015.207

A distributed android security framework. / Andow, Benjamin; Wang, Haodong.
Proceedings - 2015 IEEE International Conference on Smart City, SmartCity 2015, Held Jointly with 8th IEEE International Conference on Social Computing and Networking, SocialCom 2015, 5th IEEE International Conference on Sustainable Computing and Communications, SustainCom 2015, 2015 International Conference on Big Data Intelligence and Computing, DataCom 2015, 5th International Symposium on Cloud and Service Computing, SC2 2015. ed. / Xingang Liu; Peicheng Wang; Yufeng Wang; Mianxiong Dong; Robert C. H. Hsu; Feng Xia; Yuhui Deng. usa: Institute of Electrical and Electronics Engineers Inc., 2015. p. 1045-1052 7463862.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - A distributed android security framework

AU - Andow, Benjamin

AU - Wang, Haodong

PY - 2015/1/1

Y1 - 2015/1/1

N2 - The current security models on mobile devices do not provide the level of protection required to handle sensitive data, such as protected healthcare information. In this paper, we introduce a Distributed Android Security Framework (DASF). DASF is a custom security framework for Android-based mobile devices that allows the enforcement of dynamic security policies on an application's privileges and sensitive data. DASF allows servers to dynamically impose security policies by using an application-layer message protocol implemented in the system. The security policies enforced by DASF enables system-wide privilege restrictions on untrustworthy applications and sensitive data. Ultimately, DASF allows organizations (i.e., data owners) to dynamically dictate the security policies enforced by the system, and retain control of the sensitive data they send to the device. We implement a prototype of DASF on Android Jellybean, and perform a security and performance evaluation. We show the DASF can defeat a number of security threats associated with using mobile devices in the healthcare industry, and imposes a reasonable performance overhead.

AB - The current security models on mobile devices do not provide the level of protection required to handle sensitive data, such as protected healthcare information. In this paper, we introduce a Distributed Android Security Framework (DASF). DASF is a custom security framework for Android-based mobile devices that allows the enforcement of dynamic security policies on an application's privileges and sensitive data. DASF allows servers to dynamically impose security policies by using an application-layer message protocol implemented in the system. The security policies enforced by DASF enables system-wide privilege restrictions on untrustworthy applications and sensitive data. Ultimately, DASF allows organizations (i.e., data owners) to dynamically dictate the security policies enforced by the system, and retain control of the sensitive data they send to the device. We implement a prototype of DASF on Android Jellybean, and perform a security and performance evaluation. We show the DASF can defeat a number of security threats associated with using mobile devices in the healthcare industry, and imposes a reasonable performance overhead.

KW - Access Control

KW - Android

KW - Distributed

KW - Security

UR - https://www.scopus.com/inward/record.uri?partnerID=HzOxMe3b&scp=84973927978&origin=inward

UR - https://www.scopus.com/inward/citedby.uri?partnerID=HzOxMe3b&scp=84973927978&origin=inward

U2 - 10.1109/SmartCity.2015.207

DO - 10.1109/SmartCity.2015.207

M3 - Conference contribution

SP - 1045

EP - 1052

BT - Proceedings - 2015 IEEE International Conference on Smart City, SmartCity 2015, Held Jointly with 8th IEEE International Conference on Social Computing and Networking, SocialCom 2015, 5th IEEE International Conference on Sustainable Computing and Communications, SustainCom 2015, 2015 International Conference on Big Data Intelligence and Computing, DataCom 2015, 5th International Symposium on Cloud and Service Computing, SC2 2015

A2 - Liu, Xingang

A2 - Wang, Peicheng

A2 - Wang, Yufeng

A2 - Dong, Mianxiong

A2 - Hsu, Robert C. H.

A2 - Xia, Feng

A2 - Deng, Yuhui

PB - Institute of Electrical and Electronics Engineers Inc.

CY - usa

T2 - IEEE International Conference on Smart City, SmartCity 2015

Y2 - 19 December 2015 through 21 December 2015

ER -

Andow B, Wang H. A distributed android security framework. In Liu X, Wang P, Wang Y, Dong M, Hsu RCH, Xia F, Deng Y, editors, Proceedings - 2015 IEEE International Conference on Smart City, SmartCity 2015, Held Jointly with 8th IEEE International Conference on Social Computing and Networking, SocialCom 2015, 5th IEEE International Conference on Sustainable Computing and Communications, SustainCom 2015, 2015 International Conference on Big Data Intelligence and Computing, DataCom 2015, 5th International Symposium on Cloud and Service Computing, SC2 2015. usa: Institute of Electrical and Electronics Engineers Inc. 2015. p. 1045-1052. 7463862 doi: 10.1109/SmartCity.2015.207

A distributed android security framework

Abstract

Conference

Keywords

Access to Document

Other files and links

Cite this