Abstract:Recent years have experienced explosive growth of smartphone sales. Inevitably, the rise in the popularity of smartphones also makes them an attractive target for attacks. In light of these threats, current mobile platform providers have developed various server-side vetting processes to block malicious applications (“apps”). While helpful, they are still far from ideal in achieving their goals. To make matters worse, the presence of alternative (less-regulated) mobile marketplaces also opens up new attack vectors, which necessitate client-side solutions (e.g., mobile anti-virus software) to run on mobile devices. However, existing client-side solutions still exhibit limitations in their capability or deployability. In this paper, we present AirBag, a lightweight OS-level virtualization approach to enhance the popular Android platform and boost our defense capability against mobile malware infection. Assuming a trusted smartphone OS kernel and the fact that untrusted apps will be eventually installed onto users’ phones, AirBag is designed to isolate and prevent them from infecting our normal systems (e.g., corrupting the phone firmware) or stealthily leaking private information. More specifically, by dynamically creating an isolated runtime environment with its own dedicated namespace and virtualized system resources, AirBag not only allows for transparent execution of untrusted apps, but also effectively mediates their access to various system resources or phone functionalities (e.g., SMSs or phone calls). We have implemented a proof-of-concept prototype on three representative mobile devices, i.e., Google Nexus One, Nexus 7, and Samsung Galaxy S III. The evaluation results with a number of untrusted apps, including real-world mobile malware, demonstrate its practicality and effectiveness.

iGuard: A real-time anti-theft system for smartphones.

WatchOUT: A Practical Secure Pedestrian Warning System Based on Smartphones

Taming Information-Stealing Smartphone Applications (On Android)

Toward a Secure QR Code System by Fingerprinting Screens.

AppShell: Making Data Protection Practical for Lost or Stolen Android Devices

Vehicle Anti-Theft Tracking System Based on Internet of Things

Owner-Centric Protection of Unstructured Data on Smartphones.

AirBag: Boosting Smartphone Resistance to Malware Infection.

Anti-Theft Application for Android-Based Smartphone

Anti-Theft Technology Based on Wireless Sensor Network

IoT Based Anti-Theft Detection System

Security after login: Identity change detection on smartphones using sensor fusion

Smart Home Anti-Theft System: A Novel Approach for Near Real-Time Monitoring and Smart Home Security for Wellness Protocol

Vehicle Anti-Theft Technology

Anti-theft Security System for Vehicles

CoSafe: Securing Mobile Devices Through Mutual Mobility Consistency Verification

Intelligent anti-theft system for electric bicyclebased on Internet of Things

A Non-Intrusive Machine Learning Solution for Malware Detection and Data Theft Classification in Smartphones

Design and Implementation of an Intelligent Safety and Security System for Vehicles Based on GSM Communication and IoT Network for Real-Time Tracking

An on-vehicle wireless remote alarm platform based on image processing

A Security System Based on Door Movement Detecting