.png){kind=icon}
返回
Security Architecture for a Secure Database on Android
.png){kind=icon}
OA
AI
DOI：10.1109/ACCESS.2018.2799384.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
As mobile devices are increasingly used in various daily activities, they have become a movable storage that stores various personal/business information of users. Most mobile OSes, including Android, store personal data in databases and provide APIs for apps, which can be used to access a database managed by the system or to manage its own database. However, Android, which is our main focus here, stores data as plaintext in its database; as a result, the database content can be leaked unintentionally through several vulnerabilities. Additionally, the responsibility for the security of the database content created by an app lies with the developer of the app, while the mobile OS only provides minimal security features, such as isolation and access control. In this paper, we propose a security architecture to construct a secure database environment on Android. To this end, we entirely separate the database system from the app domain-to the best of our knowledge, this is the first such design for localized mobile databases. The separated database system manages a database with encryption; hence, data are no longer stored as plaintext. By delivering the responsibility over the system, this separation enables app developers to be free from the difficult task of managing the security of the database. The proposed system also provides tight access control over a database by using a runtime information of an app. Note that the current access control of Android is based on the Linux uid of an app. Thus, access is granted to a database if the app has the correct uid, regardless of the identity of the app. That is, our method creates a one-to-one pairing between the app and its database, and ensures that database access is granted only to the owner app. Additionally, we propose a similarity comparison method that helps to determine whether a new app is an updated of a previous version; this improves upon the current method, which relies only on a signature check and the package name of the app. To evaluate the feasibility of the proposed architecture, we conduct a series of experiments on our prototype implementation. The results show that the proposed secure database architecture is feasible with acceptable overhead.
Keyword:
Android
mobile database
secure database
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
Application of the comet and micronucleus assays to butterfish (Pholis gunnellus) erythrocytes from the Firth of Forth, Scotland彗星和微核测定法在苏格兰福斯峡湾的butter鱼 (Pholis gunnellus) 红细胞中的应用.png)
Chemosphere
ChemosphereIF0
PREAI
分享收藏Printed Thin Lithium Foil with Flexible Thickness and Width for Industrial Battery Applications
PREAI
分享收藏分享收藏Energy Communities: A review on trends, energy system modelling, business models, and optimisation objectives能源社区: 趋势，能源系统建模，商业模式和优化目标的回顾OAAI
OAAI分享收藏Measuring, analyzing and predicting security vulnerabilities in software systemsCOMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏
查看更多内容