Abstract:More and more powerful personal smart devices take users, especially the elder, into a disaster of policy administration where users are forced to set personal management policies in these devices. Considering a real case of this issue in the Android security, it is hard for users, even some programmers, to generally identify malicious permission requests when they install a third-party application. Motivated by the popularity of mutual assistance among friends (including family members) in the real world, we propose a novel framework for policy administration, referring to Socialized Policy Administration (SPA for short), to help users manage the policies in widely deployed personal devices. SPA leverages a basic idea that a user may invite his or her friends to help set the applications. Especially, when the size of invited friends increases, the setting result can be more resilient to a few malicious or unprofessional friends. We define the security properties of SPA, and propose an enforcement framework where users' friends can help users set applications without the leakage of friends' preferences with the supports of a privacy preserving mechanism. In our prototype, we only leverage partially homomorphic encryption cryptosystems to implement our framework, because the fully homomorphic encryption is not acceptable to be deployed in a practical service at the moment. Based on our prototype and performance evaluation, SPA is promising to support major types of policies in current popular applications with acceptable performance.

Research on the Support to Legacy Applications in API-Based SSL VPN

Solution to VPN and Authentication System

Research on security extensions based on Java 2 security architecture

Research and Application of SSL VPN Technology

Design and Implementation of Parallel Architecture for Legacy System

A Multi-tunnel VPN Concurrent System for New Generation Network Based on User Space

Web services based supporting platform for virtual enterprise

SPA: Inviting Your Friends to Help Set Android Apps.

On Application of Server Virtualization Technology in Campus Network Management

Security Architecture Design of VLAN and VPN Technology-based Enterprise Network

CSGW-RAS: A Novel Secure Solution for Remote Access Based on SSL

Virtual Private Networks Constructed by the Combination of IPSec & L2TP

Research on Enterprise Application Integration Based on Web Services

Study of Network Authentication Based on RADIUS Protocol

The Application of SSL Protocol in Computer Network Communication

The research of VPN security gateway based on IPSec

A System Framework of Security Management in Enterprise Systems

VPN Scheme of User Space

SEAPP: A secure application management framework based on REST API access control in SDN-enabled cloud environment

A NEW SAFE FRAMEWORK OF ENTERPRISE APPLICATION INTEGRATION BASED ON WEB SERVICES

Secure Home Gateway Using Trust Management Strategy