User privacy and modern mobile services: are they on the same path?

  • Authors:

  • D. Damopoulos;G. Kambourakis;M. Anagnostopoulos;S. Gritzalis;J. H. Park

  • Affiliations:

  • Department of Information and Communication Systems Engineering, University of the Aegean, Samos, Greece;Department of Information and Communication Systems Engineering, University of the Aegean, Samos, Greece;Department of Information and Communication Systems Engineering, University of the Aegean, Samos, Greece;Department of Information and Communication Systems Engineering, University of the Aegean, Samos, Greece;Department of Computer Science and Engineering, Seoul National University of Science and Technology, Seoul, Republic of Korea

  • Venue:
  • Personal and Ubiquitous Computing
  • Year:
  • 2013

Quantified Score

Hi-index 0.00

Visualization

Abstract

Perhaps, the most important parameter for any mobile application or service is the way it is delivered and experienced by the end-users, who usually, in due course, decide to keep it on their software portfolio or not. Most would agree that security and privacy have both a crucial role to play toward this goal. In this context, the current paper revolves around a key question: Do modern mobile applications respect the privacy of the end-user? The focus is on the iPhone platform security and especially on user's data privacy. By the implementation of a DNS poisoning malware and two real attack scenarios on the popular Siri and Tethering services, we demonstrate that the privacy of the end-user is at stake.