Security and Privacy in Mobile Information and Communication Systems
Third International ICST Conference, MOBISEC 2011, Aalborg, Denmark, May 17-19, 2011, Revised Selected Papers
Published on 29. April 2012
X, 185 pages
978-3-642-30244-2 (ISBN)
Description
This book constitutes the thoroughly refereed post-conference proceedings of the Third International ICST Conference on Security and Privacy in Mobile Information and Communication Systems (MOBISEC 2011) held in Aalborg, Denmark, in May 2011. The 15 revised full papers were carefully selected from numerous submissions and cover the most active areas of research in mobile security with its 3 focus areas machine-to-machine communication security, policies for mobile environments, and mobile user authentication and authorization.
More details
Other editions
Additional editions
Ramjee Prasad | Károly Farkas | Andreas U. Schmidt
Security and Privacy in Mobile Information and Communication Systems
Third International ICST Conference, MOBISEC 2011, Aalborg, Denmark, May 17-19, 2011, Revised Selected Papers
Book
05/2012
1st Edition
Springer
€53.49
Shipment within 7-9 days
Content
- Title Page
- Preface
- Organization
- Table of Contents
- Conference Papers
- Android Market Analysis with Activation Patterns
- Introduction
- Android Permission Mechanism
- Related Work
- Activation Patterns
- Analyzing the Android Market with Activation Patterns
- Conclusions and Outlook
- References
- Gesture Authentication with Touch Input for Mobile Devices
- Introduction
- Gestures
- Usability Benefits
- Security Benefits
- Experimental Design
- Analysis
- Dynamic Time Warping
- Methodology
- Results
- Stage 1: Gesture with No Taps
- Stage 2: Gesture with Taps
- Related Work
- Conclusions and Future Work
- Future Work
- References
- A Context-Aware Privacy Policy Language for Controlling Access to Context Information of Mobile Users
- Introduction
- Motivation Scenarios and Requirements
- Related Work
- Houdini
- UbiCOSM
- CoPS
- Context Privacy Engine
- SenTry
- Summary
- CPPL Model
- Privacy Policy Management System Architecture
- Analytical Model
- Conclusion
- References
- Android Security Permissions - Can We Trust Them?
- Introduction
- Related Work
- Interprocess Communication
- RPC Communication
- Communication via Intents
- Alternative Communication Paths
- Information Flow Overview
- Android Permission Mechanism
- Permission Spreading
- Demonstration
- Implications for Malware
- Countermeasures
- Service Detection
- Detection of Alternative Communication Paths
- Conclusions and Outlook
- References
- Private Pooling: A Privacy-Preserving Approach for Mobile Collaborative Sensing
- Introduction
- Motivation
- Preliminaries
- Requirements
- Background
- Concept
- Analysis and Discussion
- Implementation
- Related Work
- Conclusion and Future Work
- References
- Agent Based Middleware for Maintaining User Privacy in IPTV Recommender Services
- Introduction
- Related Work
- Problem Formulation
- System Model
- Design Goals
- Threat Model
- Solution
- PCRS Components
- AMPR Components
- The Recommendation Process
- Proposed Algorithms
- Local Obfuscation Using CBT Algorithm
- Global Perturbation Using G Algorithm
- Experiments
- Conclusion and Future Work
- References
- Privacy Enhanced Device Access
- Introduction
- Background
- Use-Cases
- Outlining the Problem
- Reference Architecture and Assumptions
- Principal Entities
- Generic Architecture
- Interfaces and Channels
- Communication Security Assumptions
- Computational Performance
- Assumed Trust Relationships
- Intruder Model and Intruder Mitigation
- Intruder Model
- Compromise Containment
- Security Requirements and Privacy Aspects
- Security Requirements
- The Need for Privacy
- Online Model vs. Offline Model
- Online Model
- Offline Model
- Outline of Online Solution
- Protocol Outline
- Information Elements
- Key Derivation
- The Service Type Key (STK)
- The Service Access Key (SAK)
- The Temporary Access Key (TAK)
- PELDA Protocol Description
- PELDA Phase 0 - Access Agreement
- PELDA Phase 1 - Initial Registration
- PELDA Phase 2 - Rekeying
- Protocol Analysis
- Complexity and Efficiency Aspects
- Brief Security Analysis
- Brief Privacy Analysis
- Summary and Concluding Remarks
- Summary
- Further Work
- Concluding Remarks
- References
- Energy Efficiency Measurements of Mobile Virtualization Systems
- Introduction
- Power Management of Virtualized Solutions
- Energy Efficiency Virtualization Evaluation Methodology
- Evaluation Test Bench
- Evaluation Test Cases
- Experimental L4 Linux Tests Results
- Idle State Power Consumption
- CPU and Memory Workload Power Consumption
- IO HDD Workload Power Consumption
- User Application Power Consumption
- Conclusions
- References
- Digital Holography for Security Applications
- Introduction
- Holography
- Hologram Theory
- Digital Theory
- General Principles
- Open Issues
- Digital Holography Applications
- Optical Technique for Information Security
- Optical Encryption and Decryption of Three Dimensional Objects
- Secure Data Storage Based on Digital Holography
- Wireless Multimedia Sensor Networks
- Conclusions
- References
- Formal Security Analysis of OpenID with GBA Protocol
- Introduction
- OpenID with GBA Protocol
- Protocol Description
- Constraints
- Formalization in ProVerif
- Verification Results
- BootStrapping
- OpenID with GBA
- Security against Malicious Participants
- BSF under Adversarial Control
- NAF-OP under Adversarial Control
- Attacker Partially Controls the User Entity
- Conclusion
- References
- Can a Mobile Cloud Be More Trustworthy than a Traditional Cloud
- Introduction
- Cloud Service Models
- Cloud Computing Deployment Models
- Background
- Mobile Cloud Computing (MCC)
- Trust
- Security
- Platform
- Network/Infrastructure
- Availability
- Performance
- Other Trust Factors
- Conclusion
- References
- Fingerprint Recognition with Embedded Cameras on Mobile Phones
- Introduction
- Fingerprint Recognition
- Data Collection
- Rationale
- Data Collection Steps
- Evaluation
- Feature Extraction
- Feature Comparison
- Discussion
- Conclusion
- References
- Policy Driven Remote Attestation
- Introduction
- Architecture
- Implementation
- Trusted Platform Module
- Integrity Measurement Architecture
- Trusted Boot
- Trusted Platform Service
- Attestation Authority
- Related Work
- Conclusion and Future Work
- References
- ID-Based Deniable Authentication Protocol Suitable for Mobile Devices
- Introduction
- Applications to Mobile Devices
- Preliminaries
- Notations
- Diffie-Hellman Problem
- Deniable Property
- Security Model
- Proposed Protocol
- Correctness
- Security Analysis
- Security Model
- Computational Complexity
- Implimentation Issues
- Conclusion
- References
- Mobile Security with Location-AwareRole-Based Access Control
- Introduction
- RBAC in XACML
- GeoXACML
- Implementing Location-Aware RBAC Based on GeoXACML
- Spatial Separation of Duties Constraints in GeoXACML
- IPS Policy Example
- Discussion
- Related Work
- References
- Conclusions
- Author Index
