Abstract:Recent years have experienced explosive growth of smartphone sales. Inevitably, the rise in the popularity of smartphones also makes them an attractive target for attacks. In light of these threats, current mobile platform providers have developed various server-side vetting processes to block malicious applications (“apps”). While helpful, they are still far from ideal in achieving their goals. To make matters worse, the presence of alternative (less-regulated) mobile marketplaces also opens up new attack vectors, which necessitate client-side solutions (e.g., mobile anti-virus software) to run on mobile devices. However, existing client-side solutions still exhibit limitations in their capability or deployability. In this paper, we present AirBag, a lightweight OS-level virtualization approach to enhance the popular Android platform and boost our defense capability against mobile malware infection. Assuming a trusted smartphone OS kernel and the fact that untrusted apps will be eventually installed onto users’ phones, AirBag is designed to isolate and prevent them from infecting our normal systems (e.g., corrupting the phone firmware) or stealthily leaking private information. More specifically, by dynamically creating an isolated runtime environment with its own dedicated namespace and virtualized system resources, AirBag not only allows for transparent execution of untrusted apps, but also effectively mediates their access to various system resources or phone functionalities (e.g., SMSs or phone calls). We have implemented a proof-of-concept prototype on three representative mobile devices, i.e., Google Nexus One, Nexus 7, and Samsung Galaxy S III. The evaluation results with a number of untrusted apps, including real-world mobile malware, demonstrate its practicality and effectiveness.

Design and implementation of a context-based Android mobile terminal trusted running control system

Trusted Terminal Design of Distributed Environment

AirBag: Boosting Smartphone Resistance to Malware Infection.

Implementation of Security Evaluating Tool for Mobile Intelligent Terminal Operating System on Android Operating System

A Trustenclave-Based Architecture for Ensuring Run-Time Security in Embedded Terminals

Towards a multilayered permission-based access control for extending Android security.

Attack and Defense Research on Mobile Intelligent Terminals Used in Electrical Systems

Context-Aware Usage Control for Android.

Implantation of Android System based on ADB Debugging

Design and Realization of Mobile Trojan Based on Android Platform

An APP Sensitive Behaviors Detection Method Based on Android Kernel and Its Implementation

DESIGN AND IMPLEMENTATION OF A NEW SECURITY MANAGEMENT SOFTWARE FOR SMARTPHONES

vTrust: Remotely Executing Mobile Apps Transparently With Local Untrusted OS

A survey of android mobile platform security

Security Authentication System based on Speech Recognition

Security Test of Auditing Function based on Android Mobile Intelligent Terminal OS

Android platform-based individual privacy information protection system

FineDroid: Enforcing Permissions with System-Wide Application Execution Context.

Management system for secure mobile application development

Defensor: Lightweight and Efficient Security-Enhanced Framework for Android

Design of Industrial Control Monitoring Software Based on Android