More Web Proxy on the site http://driver.im/

tutorial

A Context-aware Adaptive Security Framework for Mobile Applications

Authors:

Dhiah Abou-Tair,

Viktor Dmitriyev,

Jorge Marx GomezAuthors Info & Claims

ICCASA '14: Proceedings of the 3rd International Conference on Context-Aware Systems and Applications

Pages 147 - 153

Published: 07 October 2014 Publication History

Abstract

Mobile devices currently offer many value-added applications and services such as messaging, navigation, social networking, finance, and entertainment. As these mobile applications have access to users' personal information and are capable of gathering and transmitting trust sensitive information, posing security and privacy risks. In this paper, we propose a context-aware adaptive security framework for eliciting users' context information and adapting this information with mobile applications' network access control mechanism. The framework enforces the execution of mobile applications inside security incubators to control the communication between mobile applications and mobile device resources. Applications' access requests are analyzed based on user's context information collected from the mobile device sensors and the application security configuration.

References

[1]

P. Persson and Y. Jung, "Nokia sensor: from research to product," in Proceedings of the 2005 conference on Designing for User eXperience, ser. DUX '05. New York, NY, USA: AIGA: American Institute of Graphic Arts, 2005. http://dl.acm.org/citation.cfm?id=1138235.1138297

Digital Library

[2]

A. Distefano, A. Grillo, A. Lentini, and G. F. Italiano, "Securemydroid: Enforcing security in the mobile devices lifecycle," in Proceedings of the Sixth Annual Workshop on Cyber Security and Information Intelligence Research, ser. CSIIRW '10. New York, NY, USA: ACM, 2010, pp. 27:1–27:4. http://doi.acm.org/10.1145/1852666.1852696

Digital Library

[3]

P. Hornyack, S. Han, J. Jung, S. Schechter, and D. Wetherall, "These aren't the droids you're looking for: Retrofitting android to protect data from imperious applications," in Proceedings of the 18th ACM Conference on Computer and Communications Security, ser. CCS '11. New York, NY, USA: ACM, 2011, pp. 639–652. http://doi.acm.org/10.1145/2046707.2046780

Digital Library

[4]

R. Balebako, J. Jung, W. Lu, L. F. Cranor, and C. Nguyen, ""little brothers watching you": Raising awareness of data leaks on smartphones," in Proceedings of the Ninth Symposium on Usable Privacy and Security, ser. SOUPS '13. New York, NY, USA: ACM, 2013, pp. 12:1–12:11. http://doi.acm.org/10.1145/2501604.2501616

Digital Library

[5]

J. S. Dyer, P. C. Fishburn, R. E. Steuer, J. Wallenius, and S. Zionts, "Multiple criteria decision making, multiattribute utility theory: The next ten years," Management Science, vol. 38 Issue: 5, pp. 645–654, 1992.

Digital Library

[6]

Rosenbloom, "A probabilistic interpretation of the final rankings in AHP," European Journal of Operational Research, vol. 96, no. 2, pp. 371–378, 1997. http://www.sciencedirect.com/science/article/pii/S0377221796000495

[7]

Y. Koumoto, H. Nonaka, and T. Yanagida, "A proposal of context-aware service composition method based on analytic hierarchy process," in New Advances in Intelligent Decision Technologies, ser. Studies in Computational Intelligence, K. Nakamatsu, G. Phillips-Wren, L. Jain, and R. Howlett, Eds. Springer Berlin Heidelberg, 2009, vol. 199, pp. 65–71. http://dx.doi.org/10.1007/978-3-642-00909-97.

[8]

M. Cocea and G. Magoulas, "Context-dependent personalised feedback prioritisation in exploratory learning for mathematical generalisation," in User Modeling, Adaptation, and Personalization, ser. Lecture Notes in Computer Science, G.-J. Houben, G. McCalla F. Pianesi, and M. Zancanaro, Eds. Springer Berlin Heidelberg, Springer Berlin Heidelberg, vol. 5535, pp. 271–282. http://dx.doi.org/10.1007/978-3-642-02247-026

Digital Library

[9]

D.-N. Chen, P. J.-H. Hu, Y.-R. Kuo, and T.-P. Liang, "A web-based personalized recommendation system for mobile phone selection: Design, implementation, and evaluation," Expert Systems with Applications, vol. 37, no. 12, pp. 8201– 8210, 2010. http://www.sciencedirect.com/science/article/pii/S095741741000477X

Digital Library

[10]

T. L. Saaty, Decision Making for Leaders: The Analytic Hierarchy Process for Decisions in a Complex World. Pittsburgh, Pennsylvania: RWS Publications, 1999.

[11]

National Institute of Standards and Technology NIST 800-97, Establishing Wireless Robust Security Networks: A Guide to IEEE 802.11i, http://csrc.nist.gov/publications/nistpubs/800-97/SP800-97.pdf

[12]

W. Enck, P. Gilbert, B.-G. Chun, L. P. Cox, J. Jung, P. McDaniel, and A. N. Sheth, "Taintdroid: An information-flow tracking system for realtime privacy monitoring on smartphones," in Proceedings of the 9th USENIX Conference on Operating Systems Design and Implementation, ser. OSDI'10. Berkeley, CA, USA: USENIX Association, 2010, pp. 1–6. http://dl.acm.org/citation.cfm?id=1924943.1924971

Digital Library

[13]

P. G. Kelley, L. F. Cranor, and N. Sadeh, "Privacy as part of the app decision-making process," in Proceedings of the SIGCHI Conference on Human Factors in Computing Systems, ser. CHI '13. New York, NY, USA: ACM, 2013, pp. 3393–3402.

Digital Library

[14]

G. Johnson, A. Agrawala, and E. Billionniere, "A framework for shrink-wrapping security services," in Proceedings of the 2010 IEEE International Conference on Services Computing, ser. SCC '10. Washington, DC, USA: IEEE Computer Society, 2010, pp. 639–640. http://dx.doi.org/10.1109/SCC.2010.79

Digital Library

[15]

D. Kulkarni and A. Tripathi, "Context-aware role-based access control in pervasive computing systems," in Proceedings of the 13th ACM Symposium on Access Control Models and Technologies, ser. SACMAT '08. New York, NY, USA: ACM, 2008, pp. 113–122. http://doi.acm.org/10.1145/1377836.1377854

Digital Library

[16]

K. Fischer and S. Karsch, "Modelling security relevant context an ap- proach towards adaptive security in volatile mobile web environments," in International Conference on Web Science, Koblenz, Germany, 2011.

[17]

H. Shen and Y. Cheng, "A context-aware semantic-based access control model for mobile web services," in Advanced Research on Computer Science and Information Engineering, ser. Communications in Computer and Information Science, G. Shen and X. Huang, Eds. Springer Berlin Heidelberg, 2011, vol. 153, pp. 132–139. http://dx.doi.org/10.1007/978-3-642-21411-021

[18]

R. L. Anand Dersingh and A. Jost, "Context-aware access control using semantic policies," in Ubiquitous Computing And Communication Journal (UBICC) Special Issue on Autonomic Computing Systems and Applications, 2008, vol. 3, pp. 19–32.

[19]

G. Bai, L. Gu, T. Feng, Y. Guo, and X. Chen, "Context-aware usage control for android," in Security and Privacy in Communication Networks, ser. Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, ser. Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, S. Jajodia and J. Zhou, Eds. Springer Berlin Heidelberg, 2010, vol. 50, pp. 326–343. {Online}. Available: http://dx.doi.org/10.1007/978-3-642-16161-2 19

[20]

A. Mihovska and N. Prasad, Adaptive Security Architecture based on EC-MQV Algorithm in Personal Network (PN), 2007, pp. 433–437.

[21]

E. Hayashi, S. Das, S. Amini, J. Hong, and I. Oakley, "Casa: context-aware scalable authentication," in Proceedings of the Ninth Symposium on Usable Privacy and Security, ser. SOUPS '13. New York, NY, USA: ACM, 2013, pp. 3:1–3:10. http://doi.acm.org/10.1145/2501604.2501607

Digital Library

[22]

A. Gupta, M. Miettinen, N. Asokan, and M. Nagy, "Intuitive security policy configuration in mobile devices using context profiling," in Proceedings of the 2012 ASE/IEEE International Conference on Social Computing and 2012 ASE/IEEE International Conference on Privacy, Security, Risk and Trust, ser. SOCIALCOM-PASSAT '12. Washington, DC, USA: IEEE Computer Society, 2012, pp. 471–480. {Online}. http://dx.doi.org/10.1109/SocialCom-PASSAT.2012.60

Digital Library

[23]

M. Conti, V. Nguyen, and B. Crispo, "Crepe: Context-related policy enforcement for android," in Information Security, ser. Lecture Notes in Computer Science, M. Burmester, G. Tsudik, S. Magliveras, and I. Ili, Eds. Springer Berlin Heidelberg, 2011, vol. 6531, pp. 331–345. http://dx.doi.org/10.1007/978-3-642-18178-8 29

Digital Library

[24]

Jajodia, S., J. Zhou, et al. (2010). Context-Aware Usage Control for Android. Security and Privacy in Communication Networks, Springer Berlin Heidelberg. 50: 326–343.

Cited By

Rhujittawiwat TAnderson CKeen DMiles CFarkas CSmiles SWells NRoginski JFrederick SBanik S(2022)Making smart platforms smarterJournal of Computing Sciences in Colleges10.5555/3512733.351273737:5(43-53)Online publication date: 19-Jan-2022
https://dl.acm.org/doi/10.5555/3512733.3512737
Trnka MCerny TNadimi ECerny TKim SWang W(2015)Context-aware Role-based Access Control Using Security LevelsProceedings of the 2015 Conference on research in adaptive and convergent systems10.1145/2811411.2811498(280-284)Online publication date: 9-Oct-2015
https://dl.acm.org/doi/10.1145/2811411.2811498

Index Terms

A Context-aware Adaptive Security Framework for Mobile Applications

Recommendations

Context-aware Role-based Access Control Using Security Levels
RACS '15: Proceedings of the 2015 Conference on research in adaptive and convergent systems

Security of software applications is a very challenging and extensive topic. to keep up with the trend of personalized context aware applications the security design must adapt to it. this paper presents context awareness into the role based access ...
Context-aware and automatic configuration of mobile devices in cloud-enabled ubiquitous computing

Context-sensitive (or aware) applications have, in recent years, moved from the realm of possibilities to that of ubiquity. One exciting research area that is still very much in the realm of possibilities is that of cloud computing, and in this paper, ...
Context aware service provisioning in mobile grid

In mobile grid, it is necessary to maintain end users' needs while addressing issues such as rapid, unpredictable changes of highly mobile contexts in which wireless mobile devices operate. Context-aware mobile grid services that exploit information ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

cover image ACM Other conferences

ICCASA '14: Proceedings of the 3rd International Conference on Context-Aware Systems and Applications

October 2014

184 pages

ISBN:9781631900051

In-Cooperation

EAI: The European Alliance for Innovation
SIGAPP: ACM Special Interest Group on Applied Computing

Publisher

ICST (Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering)

Brussels, Belgium

Publication History

Published: 07 October 2014

Check for updates

Author Tags

Qualifiers

Tutorial
Research
Refereed limited

Conference

ICCASA '14

ICCASA '14: 3rd International Conference on Context-Aware Systems and Applications

October 7 - 9, 2014

Dubai, United Arab Emirates

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

2
Total Citations
View Citations
261
Total Downloads

Downloads (Last 12 months)15
Downloads (Last 6 weeks)1

Reflects downloads up to 02 Dec 2024

Other Metrics

View Author Metrics

Citations

Cited By

Rhujittawiwat TAnderson CKeen DMiles CFarkas CSmiles SWells NRoginski JFrederick SBanik S(2022)Making smart platforms smarterJournal of Computing Sciences in Colleges10.5555/3512733.351273737:5(43-53)Online publication date: 19-Jan-2022
https://dl.acm.org/doi/10.5555/3512733.3512737
Trnka MCerny TNadimi ECerny TKim SWang W(2015)Context-aware Role-based Access Control Using Security LevelsProceedings of the 2015 Conference on research in adaptive and convergent systems10.1145/2811411.2811498(280-284)Online publication date: 9-Oct-2015
https://dl.acm.org/doi/10.1145/2811411.2811498

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Media

Figures

Other

Tables

View Table of Contents