The Experts below are selected from a list of 87 Experts worldwide ranked by ideXlab platform

Averlant Guillaume - One of the best experts on this subject based on the ideXlab platform.

  • Contrôle d'accès dynamique et architecture de sécurité pour la protection des Applications sous Androïd
    HAL CCSD, 2019
    Co-Authors: Averlant Guillaume
    Abstract:

    National audienceIn this thesis, we specifically focus on the Android environment. Indeed, we noticed a lack in the capabilities of the Android permission model against a number of emerging threats. To address these threats, we propose a security policy that complements the current Android permission system. This policy aims at restricting dynamically, i.e. based on the current smartphone execution context, the execution rights and the ability to access smartphone resources for each Installed Application. Besides the security benefits, the use of such a policy allows a user to have a tighter control over the access of Applications to privacy-related data. This security policy is the first contribution of this thesis. Furthermore, we designed a security architecture that implements the access control mechanisms required to carry out such a policy. This second contribution is based on a so-called "multi-level" architecture, i.e. made up of several components of different privilege levels. Specifically, these have been implemented both in the Android framework, in the Linux kernel, and in a hypervisor. The last contribution of this thesis involves the realization of a prototype of this architecture on a development board, associated with the presentation of tests that showcase the effectiveness and relevance of the approach.Dans cette thèse, nous nous intéressons spécifiquement à l'environnement Android. Nous avons en effet relevé un manque dans les capacités d'expression du modèle de permission d'Android vis-à-vis d'un certain nombre de menaces émergentes. Pour répondre à ces dernières, nous proposons une politique de sécurité venant compléter le système de permissions actuel d'Android. Celle-ci a pour but de restreindre dynamiquement, i.e. en fonction du contexte courant d'exécution du smartphone, les droits d'exécution et la capacité d'accès aux ressources du smartphone, pour chaque Application installée. Outre les bénéfices en termes de sécurité, l'utilisation d'une telle politique permet à un utilisateur d'avoir un contrôle plus fin sur l'accès des Applications aux données qui relèvent de la vie privée. Cette politique de sécurité constitue la première contribution de cette thèse. Elle est adjointe à la conception d'une architecture de sécurité implémentant les mécanismes de contrôle d'accès nécessaires à sa mise en œuvre. Cette deuxième contribution se repose sur une architecture multi-niveau, i.e. comprenant plusieurs composants de différents niveaux de privilèges. Plus précisément, ceux-ci ont été implantés à la fois dans le framework Android, dans le noyau Linux, et dans un hyperviseur. La dernière contribution de cette thèse consiste en la réalisation d'un prototype de cette architecture sur une carte de développement, associée à la présentation de tests permettant de montrer l'efficacité et la pertinence de l'approche

  • Dynamic access control and security architecture to protect Android Applications.
    2019
    Co-Authors: Averlant Guillaume
    Abstract:

    Dans cette thèse, nous nous intéressons spécifiquement à l'environnement Android. Nous avons en effet relevé un manque dans les capacités d'expression du modèle de permission d'Android vis-à-vis d'un certain nombre de menaces émergentes. Pour répondre à ces dernières, nous proposons une politique de sécurité venant compléter le système de permissions actuel d'Android. Celle-ci a pour but de restreindre dynamiquement, i.e. en fonction du contexte courant d'exécution du smartphone, les droits d'exécution et la capacité d'accès aux ressources du smartphone, pour chaque Application installée. Outre les bénéfices en termes de sécurité, l'utilisation d'une telle politique permet à un utilisateur d'avoir un contrôle plus fin sur l'accès des Applications aux données qui relèvent de la vie privée. Cette politique de sécurité constitue la première contribution de cette thèse. Elle est adjointe à la conception d'une architecture de sécurité implémentant les mécanismes de contrôle d'accès nécessaires à sa mise en oeuvre. Cette deuxième contribution se repose sur une architecture multiniveau,i.e. comprenant plusieurs composants de différents niveaux de privilèges. Plus précisément, ceux-ci ont été implantés à la fois dans le framework Android, dans le noyau Linux, et dans un hyperviseur. La dernière contribution de cette thèse consiste en la réalisation d'un prototype de cette architecture sur une carte de développement, associée à la présentation de tests permettant de montrer l'efficacité et la pertinence de l'approche.In this thesis, we specifically focus on the Android environment. Indeed, we noticed a lack in the capabilities of the Android permission model against a number of emerging threats. To address these threats, we propose a security policy that complements the current Android permission system. This policy aims at restricting dynamically, i.e. based on the current smartphone execution context, the execution rights and the ability to access smartphone resources for each Installed Application. Besides the security benefits, the use of such a policy allows a user to have a tighter control over the access ofApplications to privacy-related data. This security policy is the first contribution of this thesis. Furthermore, we designed a security architecture that implements the access control mechanisms required to carry out such a policy. This second contribution is based on a so-called "multi-level" architecture, i.e. made up of several components of different privilege levels. Specifically, these have been implemented both in the Android framework, in the Linux kernel, and in a hypervisor. The last contribution of this thesis involves the realization of a prototype of this architecture on a development board, associated with the presentation of tests that showcase the effectiveness and relevance of the approach

  • Contrôle d'accès dynamique et architecture de sécurité pour la protection des Applications sous Android
    HAL CCSD, 2019
    Co-Authors: Averlant Guillaume
    Abstract:

    National audienceIn this thesis, we specifically focus on the Android environment. Indeed, we noticed a lack in the capabilities of the Android permission model against a number of emerging threats. To address these threats, we propose a security policy that complements the current Android permission system. This policy aims at restricting dynamically, i.e. based on the current smartphone execution context, the execution rights and the ability to access smartphone resources for each Installed Application. Besides the security benefits, the use of such a policy allows a user to have a tighter control over the access ofApplications to privacy-related data. This security policy is the first contribution of this thesis. Furthermore, we designed a security architecture that implements the access control mechanisms required to carry out such a policy. This second contribution is based on a so-called "multi-level" architecture, i.e. made up of several components of different privilege levels. Specifically, these have been implemented both in the Android framework, in the Linux kernel, and in a hypervisor. The last contribution of this thesis involves the realization of a prototype of this architecture on a development board, associated with the presentation of tests that showcase the effectiveness and relevance of the approach.Dans cette thèse, nous nous intéressons spécifiquement à l'environnement Android. Nous avons en effet relevé un manque dans les capacités d'expression du modèle de permission d'Android vis-à-vis d'un certain nombre de menaces émergentes. Pour répondre à ces dernières, nous proposons une politique de sécurité venant compléter le système de permissions actuel d'Android. Celle-ci a pour but de restreindre dynamiquement, i.e. en fonction du contexte courant d'exécution du smartphone, les droits d'exécution et la capacité d'accès aux ressources du smartphone, pour chaque Application installée. Outre les bénéfices en termes de sécurité, l'utilisation d'une telle politique permet à un utilisateur d'avoir un contrôle plus fin sur l'accès des Applications aux données qui relèvent de la vie privée. Cette politique de sécurité constitue la première contribution de cette thèse. Elle est adjointe à la conception d'une architecture de sécurité implémentant les mécanismes de contrôle d'accès nécessaires à sa mise en oeuvre. Cette deuxième contribution se repose sur une architecture multiniveau,i.e. comprenant plusieurs composants de différents niveaux de privilèges. Plus précisément, ceux-ci ont été implantés à la fois dans le framework Android, dans le noyau Linux, et dans un hyperviseur. La dernière contribution de cette thèse consiste en la réalisation d'un prototype de cette architecture sur une carte de développement, associée à la présentation de tests permettant de montrer l'efficacité et la pertinence de l'approche

Bernhard J. Berger - One of the best experts on this subject based on the ideXlab platform.

  • The Transitivity of Trust Problem in the Interaction of Android Applications
    2013 International Conference on Availability Reliability and Security, 2013
    Co-Authors: Steffen Bartsch, Karsten Sohr, Michaela Bunke, Oliver Hofrichter, Bernhard J. Berger
    Abstract:

    Mobile phones have developed into complex platforms with large numbers of Installed Applications and a wide range of sensitive data. Application security policies limit the permissions of each Installed Application. As Applications may interact, restricting single Applications may create a false sense of security for the end users while data may still leave the mobile phone through other Applications. Instead, the information flow needs to be policed for the composite system of Applications in a transparent and usable manner. In this paper, we propose to employ static analysis based on the software architecture and focused data flow analysis to scalably detect information flows between components. Specifically, we aim to reveal transitivity of trust problems in multi-component mobile platforms. We demonstrate the feasibility of our approach with Android Applications, although the generalization of the analysis to similar composition-based architectures, such as Service-oriented Architecture, can also be explored in the future.

Feno Heriniaina Rabevohitra - One of the best experts on this subject based on the ideXlab platform.

  • remoteencrypter an android database asymmetric encryption module
    International Conference on Mobile Systems Applications and Services, 2019
    Co-Authors: Kevin Michel Rabefaritra, Feno Heriniaina Rabevohitra
    Abstract:

    With the constant growing popularity of Android mobile Applications, securing an Application has become as important as they constitute an opportunity for wicked developers to inject malwares, steal the source code or even steal customer data. In order to reduce the user exposure to malicious Applications, Google is constantly updating their developer policy on the Play Store in an attempt to reduce the number of hosted malicious apps. However, as an Installed Application may retain sensitive information in the local SQLite database, it is essential that the developers have their data stored securely. Such provided data security should be maintained during inter-process communications between different Applications. In this paper, we introduce RemoteEncrypter, a ready-for-integration Android Application asymmetric encryption module on remote data read access. We demonstrate the effectiveness and efficiency of our approach with two dummy Applications that respectively store and access a database. RemoteEncrypter has been tested and efficiently addresses the weakness of standard database leakage and unwanted access. To the best of our knowledge, the present work is the first proposal for this approach.

Miguel Frade - One of the best experts on this subject based on the ideXlab platform.

  • ARES - Digital Forensic Artifacts of the Cortana Device Search Cache on Windows 10 Desktop
    2016 11th International Conference on Availability Reliability and Security (ARES), 2016
    Co-Authors: Patricio Domingues, Miguel Frade
    Abstract:

    Microsoft Windows 10 Desktop edition has brought some new features and updated other ones that are of special interest to digital forensics analysis. The search box available on the taskbar, next to the Windows start button is one of these novelties. Although the primary usage of this search box is to act as an interface to the intelligent personal digital assistant Cortana, in this paper, we study the digital forensic artifacts of the search box on machines when Cortana is explicitly disabled. Specifically, we locate, characterize and analyze the content and dynamics of the JSON-based files that are periodically generated by the Cortana device search cache system. Forensically important data from these JSON files include the number of times each Installed Application has been run, the date of the last execution and the content of the custom jump list of the Applications. Since these data are collected per user and saved in a resilient text format, they can help in digital forensics, mostly in assisting the validation of other sources of information.

Steffen Bartsch - One of the best experts on this subject based on the ideXlab platform.

  • The Transitivity of Trust Problem in the Interaction of Android Applications
    2013 International Conference on Availability Reliability and Security, 2013
    Co-Authors: Steffen Bartsch, Karsten Sohr, Michaela Bunke, Oliver Hofrichter, Bernhard J. Berger
    Abstract:

    Mobile phones have developed into complex platforms with large numbers of Installed Applications and a wide range of sensitive data. Application security policies limit the permissions of each Installed Application. As Applications may interact, restricting single Applications may create a false sense of security for the end users while data may still leave the mobile phone through other Applications. Instead, the information flow needs to be policed for the composite system of Applications in a transparent and usable manner. In this paper, we propose to employ static analysis based on the software architecture and focused data flow analysis to scalably detect information flows between components. Specifically, we aim to reveal transitivity of trust problems in multi-component mobile platforms. We demonstrate the feasibility of our approach with Android Applications, although the generalization of the analysis to similar composition-based architectures, such as Service-oriented Architecture, can also be explored in the future.