2020/08/14 by Adriana Szekeres, Szekeres, Adriana, Irene Zhang +15
Computer Science · #Advanced Malware Detection Techniques #Cloud Data Security Solutions #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #Operating Systems (cs.OS) #Security and Verification in Computing
paper · pdf · doi:10.48550/arxiv.2008.06536
openalex publication_date 2020/08/14 · openalex created_date 2022/07/26 · openalex updated_date 2026/07/28
Today's mobile devices sense, collect, and store huge amounts of personal\ninformation, which users share with family and friends through a wide range of\napplications. Once users give applications access to their data, they must\nimplicitly trust that the apps correctly maintain data privacy. As we know from\nboth experience and all-too-frequent press articles, that trust is often\nmisplaced. While users do not trust applications, they do trust their mobile\ndevices and operating systems. Unfortunately, sharing applications are not\nlimited to mobile clients but must also run on cloud services to share data\nbetween users. In this paper, we leverage the trust that users have in their\nmobile OSes to vet cloud services. To do so, we define a new Secure Application\nFlow Enforcement (SAFE) framework, which requires cloud services to attest to a\nsystem stack that will enforce policies provided by the mobile OS for user\ndata. We implement a mobile OS that enforces SAFE policies on unmodified mobile\napps and two systems for enforcing policies on untrusted cloud services. Using\nthese prototypes, we demonstrate that it is possible to enforce existing user\nprivacy policies on unmodified applications.\n