Abstract:Recent years have experienced explosive growth of smartphone sales. Inevitably, the rise in the popularity of smartphones also makes them an attractive target for attacks. In light of these threats, current mobile platform providers have developed various server-side vetting processes to block malicious applications (“apps”). While helpful, they are still far from ideal in achieving their goals. To make matters worse, the presence of alternative (less-regulated) mobile marketplaces also opens up new attack vectors, which necessitate client-side solutions (e.g., mobile anti-virus software) to run on mobile devices. However, existing client-side solutions still exhibit limitations in their capability or deployability. In this paper, we present AirBag, a lightweight OS-level virtualization approach to enhance the popular Android platform and boost our defense capability against mobile malware infection. Assuming a trusted smartphone OS kernel and the fact that untrusted apps will be eventually installed onto users’ phones, AirBag is designed to isolate and prevent them from infecting our normal systems (e.g., corrupting the phone firmware) or stealthily leaking private information. More specifically, by dynamically creating an isolated runtime environment with its own dedicated namespace and virtualized system resources, AirBag not only allows for transparent execution of untrusted apps, but also effectively mediates their access to various system resources or phone functionalities (e.g., SMSs or phone calls). We have implemented a proof-of-concept prototype on three representative mobile devices, i.e., Google Nexus One, Nexus 7, and Samsung Galaxy S III. The evaluation results with a number of untrusted apps, including real-world mobile malware, demonstrate its practicality and effectiveness.

Implementation and Analysis of a Practical NFC Relay Attack Example

ToAuth: Towards Automatic Near Field Authentication for Smartphones

Chord - Thwarting Relay Attacks Among Near Field Communications.

Weaknesses of the ISO/IEC 14443 protocol regarding relay attacks

When Theory and Reality Collide: Demystifying the Effectiveness of Ambient Sensing for NFC-based Proximity Detection by Applying Relay Attack Data

Security Analysis of Near-Field Communication (NFC) Payments

NFC-enabled Attack on Cyber Physical Systems: A Practical Case Study.

Using Ambient Sensors for Proximity and Relay Attack Detection in NFC Transactions: A Reproducibility Study

NFCGate: Opening the Door for NFC Security Research with a Smartphone-Based Toolkit

You foot the bill! Attacking NFC with passive relays

User Context Detection For Relay Attack Resistance In Passive Keyless Entry And Start System

Analog Physical-Layer Relay Attacks with Application to Bluetooth and Phase-Based Ranging

AirBag: Boosting Smartphone Resistance to Malware Infection.

Near Field Communication (NFC) Technology Security Vulnerabilities and Countermeasures

Large-Scale Invisible Attack On Afc Systems With Nfc-Equipped Smartphones

Securing Emerging Short Range Wireless Communications: the State of the Art

Efficient and Secure NFC Authentication for Mobile Payment Ensuring Fair Exchange Protocol

Design and Implementation of Active Access Control System by Using NFC-based EAP-AKA Protocol

A Novel NFC-Based Secure Protocol for Merchant Transactions

Channel Based Relay Attack Detection Protocol

Cryptanalysis on the RFID ACTION Protocol