Paper Info
Title
Protecting the integrity of trusted applications in mobile phone systems
Abstract
Mobile phones have evolved into indispensable devices that run many exciting applications that users can download from phone vendor's application stores. However, as it is not practical to fully vet all application code, users may download malware-infected applications, which may steal or modify security-critical data. In this paper, we propose a security architecture for phone systems that protects trusted applications from such downloaded code. Our architecture uses reference monitors in the operating system and user-space services to enforce mandatory access control policies that express an approximation of Clark-Wilson integrity. In addition, we show how to justify the integrity of mobile phone applications by using the Policy Reduced Integrity Measurement Architecture (PRIMA), which enables a remote party to verify the integrity of applications running on a phone. We have implemented a prototype on the Openmoko Linux Platform, using an SELinux kernel with a PRIMA module and user-space services that leverage the SELinux user-level policy server. We find that the performance of enforcement and integrity measurement is satisfactory, and the SELinux reference policy can be reduced in size by 90% (although more reduction should be possible), enabling practical system integrity with a desirable usability model. Copyright (C) 2010 John Wiley & Sons, Ltd.
Year
DOI
Venue
2011
10.1002/sec.194
SECURITY AND COMMUNICATION NETWORKS
Keywords
Field
DocType
mobile phones,integrity measurement,Clark-Wilson integrity,mandatory access control,reference monitor,SELinux
Computer science,Computer security,Usability,Download,System integrity,Phone,Mandatory access control,Reference monitor,Mobile phone,Enterprise information security architecture,Operating system
Journal
Volume
Issue
ISSN
4
6
1939-0114
Citations 
PageRank 
References 
1
0.42
8
Authors
6
Name
Order
Citations
PageRank
Divya Muthukumaran1568.44
Joshua Schiffman228421.79
Mohamed A. S. Hassan37919.44
Anuj Sawani4376.39
Vikhyath Rao513612.83
T Jaeger62635255.67