Abstract:Modern smartphone apps tend to contain and use vast amounts of data that can be broadly classified as structured and unstructured. Structured data, such as an user's geolocation, has predefined semantics that can be retrieved by well-defined platform APIs. Unstructured data, on the other hand, relies on the context of the apps to reflect its meaning and value, and is typically provided by the user directly into an app's interface. Recent research has shown that third-party apps are leaking highly-sensitive unstructured data, including user's banking credentials. Unfortunately, none of the current solutions focus on the protection of unstructured data. In this paper, we propose an owner-centric solution to protect unstructured data on smartphones. Our approach allows the data owners to specify security policies when providing their untrusted data to third-party apps. It tracks the flow of information to enforce the owner's policies at strategic exit points. Based on this approach, we design and implement a system, called <Literal>DataChest</Literal>. We develop several mechanisms to reduce user burden and keep interruption to the minimum, while at the same time preventing the malicious apps from tricking the user. We evaluate our system against a set of real-world malicious apps and a series of synthetic attacks to show that it can successfully prevent the leakage of unstructured data while incurring reasonable performance overhead.

An Anti-Lost Data Security Storage System for Smartphone Based on Cloud Service

AppShell: Making Data Protection Practical for Lost or Stolen Android Devices

Owner-Centric Protection of Unstructured Data on Smartphones.

Research on User Privacy Data Protection Mechanism Under Android System

Mobile Phone Based Portable Key Management

DESIGN AND IMPLEMENTATION OF A NEW SECURITY MANAGEMENT SOFTWARE FOR SMARTPHONES

Phoneprotector: Protecting User Privacy On The Android-Based Mobile Platform

Research and Implementation Key Technology of Security Mobile Office

Mobistore: Secure Cloud-like Storage on Mobile Devices

A Design and Implementation of Reliable Mobile Storage Media Management System

A Security Protocol for the Identification and Data Encrypt Key Management of Secure Mobile Devices

iGuard: A real-time anti-theft system for smartphones.

Design a Cloud Storage Platform for Pervasive Computing Environments

ON PASSWORD MANAGEMENT TECHNIQUE BASED ON SMART PHONE WITH BLUETOOTH

i-Shield: A System to Protect the Security of Your Smartphone.

Research on Data Encryption System and Technology for Cloud Storage

TH_Cloudkey: Fast, Secure and Lowcost Backup System for Using Public Cloud Storage

SDSM: A secure data service mechanism in mobile cloud computing

Secure Health Data Sharing for Medical Cyber-Physical Systems for the Healthcare 4.0.

Secure storage system and key technologies

Providing Key Recovery Capability for Mobile Communications