Trustworthy execution on mobile devices: what security properties can my mobile platform give me?

Authors:
Amit Vasudevan;Emmanuel Owusu;Zongwei Zhou;James Newsome;Jonathan M. McCune
Affiliations:
CyLab, Carnegie Mellon University;CyLab, Carnegie Mellon University;CyLab, Carnegie Mellon University;CyLab, Carnegie Mellon University;CyLab, Carnegie Mellon University
Venue:
TRUST'12 Proceedings of the 5th international conference on Trust and Trustworthy Computing
Year:
2012

Citing 17
Cited 1

Design and Implementation of Secure Xenix

IEEE Transactions on Software Engineering - Special issue on computer security and privacy
Formal requirements for virtualizable third generation architectures

Communications of the ACM
Building a MAC-Based Security Architecture for the Xen Open-Source Hypervisor

ACSAC '05 Proceedings of the 21st Annual Computer Security Applications Conference
A trusted mobile phone reference architecturevia secure kernel

Proceedings of the 2007 ACM workshop on Scalable trusted computing
The Trusted Execution Module: Commodity General-Purpose Trusted Computing

CARDIS '08 Proceedings of the 8th IFIP WG 8.8/11.2 international conference on Smart Card Research and Advanced Applications
Trusted computing building blocks for embedded linux-based ARM trustzone platforms

Proceedings of the 3rd ACM workshop on Scalable trusted computing
Scheduling execution of credentials in constrained secure environments

Proceedings of the 3rd ACM workshop on Scalable trusted computing
On-board credentials with open provisioning

Proceedings of the 4th International Symposium on Information, Computer, and Communications Security
Flexible μTPMs through disembedding

Proceedings of the 4th International Symposium on Information, Computer, and Communications Security
Privacy and security: Usable security: how to get it

Communications of the ACM - Scratch Programming for All
seL4: formal verification of an OS kernel

Proceedings of the ACM SIGOPS 22nd symposium on Operating systems principles
TrustVisor: Efficient TCB Reduction and Attestation

SP '10 Proceedings of the 2010 IEEE Symposium on Security and Privacy
Towards customizable, application specific mobile trusted modules

Proceedings of the fifth ACM workshop on Scalable trusted computing
Exploiting smart-phone USB connectivity for fun and profit

Proceedings of the 26th Annual Computer Security Applications Conference
Old, new, borrowed, blue --: a perspective on the evolution of mobile platform security architectures

Proceedings of the first ACM conference on Data and application security and privacy
Mobile Security Catching Up? Revealing the Nuts and Bolts of the Security of Mobile Devices

SP '11 Proceedings of the 2011 IEEE Symposium on Security and Privacy
Building Verifiable Trusted Path on Commodity x86 Computers

SP '12 Proceedings of the 2012 IEEE Symposium on Security and Privacy

Secure enrollment and practical migration for mobile trusted execution environments

Proceedings of the Third ACM workshop on Security and privacy in smartphones & mobile devices

Quantified Score

Hi-index	0.00

Visualization

Abstract

We are now in the post-PC era, yet our mobile devices are insecure. We consider the different stake-holders in today's mobile device ecosystem, and analyze why widely-deployed hardware security primitives on mobile device platforms are inaccessible to application developers and end-users. We systematize existing proposals for leveraging such primitives, and show that they can indeed strengthen the security properties available to applications and users, all without reducing the properties currently enjoyed by OEMs and network carriers. We also highlight shortcomings of existing proposals and make recommendations for future research that may yield practical, deployable results.