TripleMon: A multi-layer security framework for mediating inter-process communication on Android
- Authors
- Jing, Y.; Ahn, G.-J.; Hu, H.; Cho, H.; Zhao, Z.
- Issue Date
- Aug-2016
- Publisher
- IOS Press
- Keywords
- Android; mandatory access control; Mobile security; reference monitor; system security
- Citation
- Journal of Computer Security, v.24, no.4, pp.405 - 426
- Journal Title
- Journal of Computer Security
- Volume
- 24
- Number
- 4
- Start Page
- 405
- End Page
- 426
- URI
- http://scholarworks.bwise.kr/ssu/handle/2018.sw.ssu/41616
- DOI
- 10.3233/JCS-160552
- ISSN
- 0926-227X
- Abstract
- As smartphones have become an indispensable part of daily life, mobile users are increasingly relying on them to process personal information with feature-rich applications. This situation requires robust security mechanisms for protecting sensitive applications and data on mobile devices. Android, as one the most popular smartphone operating systems, provides two core security mechanisms, application sandboxing and a permission system. However, recent studies show that these mechanisms are vulnerable to be passed by a variety of attacks. In this paper, we argue for the need of designing and implementing more comprehensive security mechanisms for Android. We realize that mediating Inter-Process Communication (IPC) channels used by Android applications can mitigate prominent attacks effectively and efficiently. Based on this observation, we propose a practical multi-layer security framework called TripleMon to support policy-based mediation on Android IPC. We also discuss and evaluate a proof-of-concept prototype of TripleMon along with the experimental results derived from real malware samples and synthetic attacks. © 2016 - IOS Press and the authors. All rights reserved.
- Files in This Item
- There are no files associated with this item.
- Appears in
Collections - College of Information Technology > School of Software > 1. Journal Articles
![qrcode](https://api.qrserver.com/v1/create-qr-code/?size=55x55&data=https://scholarworks.bwise.kr/ssu/handle/2018.sw.ssu/41616)
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.