Mobile Security System Research Articles

Mobile Botnet Detection A Machine Learning Approach using SVM

The security and privacy of smartphone users are seriously threatened by mobile botnets, which allow malevolent actors to carry out a variety of illegal actions, such as DDoS attacks, data theft, and resource exploitation. These mobile botnets are becoming more and more sophisticated, making it difficult to detect them with conventional signature-based and heuristic methods. This study proposes a machine learning-based method for mobile botnet detection that makes use of Support Vector Machines (SVM).The study focuses on behavioural feature extraction from mobile device system-level data and network traffic. The SVM model is used for classification once feature selection techniques have been used to select the most pertinent and discriminative attributes. The SVM model, making use of its capacity to manage nonlinear classification and high-dimensional data.Tests carried out on a variety of network traffic and system behaviour datasets gathered from mobile devices show encouraging outcomes for the detection of botnets. Compared to conventional detection techniques, the SVM classifier outperforms them in identifying mobile botnet activities with a high degree of accuracy, precision, and recall.The suggested SVM-based method improves mobile device security by offering a flexible and successful mobile botnet detection solution. The results of this study open the door to the development of strong and durable mobile security systems by providing insights into the proactive identification and mitigation of mobile botnet threats through the use of machine learning techniques

PARTISIPASI MASYARAKAT DALAM MEMBERDAYAKAN SISKAMLING

The purpose of this research is to describe the community participation in empowering the mobile security system. This research is a qualitative descriptive research. This study uses interview data collection techniques, observation and documentation. Checking the validity of the data used triangulation of sources, triangulation of time and triangulation of techniques. The results obtained from the research are the participation of citizens in participating in the security system at Neighborhood Association 19, Cempaka Permai Village, including the participation of thoughts, energy, assets, skills and skills as well as social participation. On the other hand, there is also internal citizen participation and external participation of residents in participating in the participation system of the Neighborhood Association residents around them supporting and attending even though they do not participate in patrols, from agencies from Babinsa, Bhabinkamtibmas, Head of Rukun Warga, Head of Subdistrict, then from the Mayor's Government give an award, one of them is the Bengkulu City Political and National Unity Body.

Information technology for mobile perimeter security systems creation

The main aim of this research is the creation of information technology for mobile (of rapid deployment) security systems of the area perimeter. This system appears to be a complex of models and methods, information, software, and hardware mean that have interacted with users during decision-making and control of implementation for management solutions. The proposed information technology aimed at improving the protection level for security departments by automating the process of danger detection for perimeters and decision-making for alarm. The structural model of the system, the model of the system's components interaction, and the model of identifying the subjects of emergency threats have been proposed. A method for identifying unauthorized access to the perimeter of the secure facilities, using the production model of knowledge representation, was created. It is a set of linguistic expressions (such as "IF-THEN") and the knowledge matrix. The method of ranking for objects, which are threats of unauthorized access to the perimeter for secure facilities, has been proposed. The practical value of work consists of the possibility of the use of this information technology by perimeter's security systems of various objects. Proposed models are complete and suitable for hardware and software implementation.

Implementation And Evaluation Of The mCityPASS Protocol For Secure And Private Access To Associated Touristic Services

Abstract Touristic City Cards are managed by some city councils in order to make a step toward the SmartCity concept. Touristic City Cards enable the integration of different touristic services so as to facilitate the access to transport, cultural sites and touristic attractions to visitors. In this paper, we introduce a secure mobile system called mCityPASS that allows the smart management and secure access to this kind of service. We have implemented the system in a smartphone platform in such a way that the mobile device contains the purchased access element that holds a set of e-tickets that enables the visitors of a city to make use of the specified touristic services. The paper presents the details of the whole implementation of the system and an evaluation of the performance and the effectiveness of it. Also, an analysis of the privacy and the security properties of the presented scheme has been conducted. As a result, we can assure that the system preserves the privacy of the tourists and fulfills the more challenging security properties: fairness, non-overspending, exculpability, unsplittability and selective reusability.

Proposing a Secure Architecture for Mobile-Learning Environments and Investigating Teachers’ Attitude

Background: The next generation of learning called mobile learning (m-learning) provides education to people through mobile devices. The security of mobile systems is an important issue due to users’ mobility and use of various devices and different ways of connecting to the network. Therefore, the current study aimed at providing a secure architecture as the basis for use in m-learning software to improve the security of such systems and investigate professors’ satisfaction with this architecture. Methods: The current applied study was conducted in 2014. Statistical population included all professors using m-learning in Tabas, Firdaus, and Birjand cities, Southern Khorasan, Iran (26 participants). The purposive sampling method was used. The reliability of the questionnaire was measured using Cronbach’s alpha (94%) and the validity based on factor validity (explained percentage of variance) was 63%. According to the use of the web-based e-learning service in Southern Khorasan Payam-e-Noor University (PNU), it was attempted to write a mobile application to provide the use of this service on mobile devices. The difference between the current study provided app and other mobile apps is based on using the proposed secure architecture. To measure the satisfaction of users with the study app, a researcher-made questionnaire was distributed among the professors using the app. Data analysis was performed with SPSS 16 by t test and the one-way analysis of variance (ANOVA). Results: Findings showed that the professors using m-learning application of Southern Khorasan PNU had a positive attitude towards it with the average satisfaction of 80%. The most important factor for this satisfaction was the safety of the presented architecture, while avoiding complex and time-consuming control mechanisms. Conclusions: In the current study a secure architecture was provided for mobile system that was simple, fast, and applicable on all mobile network operators. Given the positive perspectives of professors, this architecture can be a good solution to secure m-learning environments.

A Simple Face-based Mobile Security System Design for Android Phone Protection

A Simple Face-based Mobile Security System Design for Android Phone Protection

STRATEGIE ZAPEWNIANIA BEZPIECZEŃSTWA SYSTEMÓW MOBILNYCH

STRATEGIE ZAPEWNIANIA BEZPIECZEŃSTWA SYSTEMÓW MOBILNYCH

Research and Implementation of Type-1-Based Virtualization Security System in Smart Devices Environment

Background: The mobile virtualization security system can provide enhanced security with separated environment of simultaneously and independently operating multiple OS on the Hypervisor Abstraction Layer. Methods Analysis: This paper introduces the research and implementation of Type-1-Based Virtualization Security System in Smart Device Environment. Its detailed functions are mobile virtualization management, security authentication, security policy and access control, encryption/decryption, and safe storage that provide secure communication among the guest Operating Systems. This paper also introduces an experimental product operating a mobile office application. Findings: In the comparative test with the existing TEEMO Type-2-based Virtualization Security System, it measured processing times of compulsory loading situation and no-loading situation for 12 major security APIs. As a result, our system has showed reduced API processing time from 48% to 85%, faster processing speed in both compulsory loading situation and noloading situation. Its average processing time has been 0.189 in the situation of consecutive API callings. Therefore, our system has proved acceptable processing time for real users as well as enhanced security with authentication and safe storage in the mobile hypervisor virtualization system. Application/Improvements: This research can offer assistance in providing secure communication and speed improvement among guest OS in mobile virtualization environment.

Morphable Resistive Memory Optimization for Mobile Virtualization

Virtualization offers significant benefits, such as better isolation and security for mobile systems. However, the limited amount of memory and virtualization’s memory-demanding nature make it challenging to virtualize mobile systems efficiently. In this paper, we utilize morphable resistive memories to design a high-performance mobile system with an extensible memory space. With morphable resistive memories, a simple and effective page management technique, Balloonfish, is proposed to convert the memory cell state between multilevel and single-level for achieving a balance between performance and memory space. First, an application-specific page allocation is proposed for managing morphable resistive memories in virtualized mobile systems. Besides, we use a balloon-style algorithm to balance memory allocation among multiple virtual machines. Our evaluation based on the Samsung Exynos 5250 system-on-chip with various real Android applications shows that our system achieves 28.63% performance improvement compared with the baseline scheme.

Highly Secure Mobile Devices Assisted with Trusted Cloud Computing Environments

Mobile devices have been widespread and become very popular with connectivity to the Internet, and a lot of desktop PC applications are now aggressively ported to them. Unfortunately, mobile devices are often vulnerable to malicious attacks due to their common usage and connectivity to the Internet. Therefore, the demands on the development of mobile security systems increase in accordance with advances in mobile computing. However, it is very hard to run a security program on a mobile device all of the time due the device's limited computational power and battery life. To overcome these problems, we propose a novel mobile security scheme that migrates heavy computations on mobile devices to cloud servers. An efficient data transmission scheme for reducing data traffic between devices and servers over networks is introduced. We have evaluated the proposed scheme with a mobile device in a cloud environment, whereby it achieved a maximum speedup of 13.4 compared to a traditional algorithm.

Advanced Mobile Security System Operated by Bioelectrical Sensor

This article describes a novel type of an advanced mobile security system, a myokinetic password, using surface electromyographic (EMG) signals. We proposed an advanced security system that can increase password strength without modifying password length or increasing alphabet character variation. We present an implementation of an intuitive password system that combines muscle activation to enhance password complexity. The muscle activation levels from EMG signals are used to split each individual code composition into multiple states, thereby increasing possible password combinations. We proposed a centroid-based clustering algorithm to cluster a feature into groups according to the muscle activation. We also verified the possibility of expanding the technique to support up to three muscle activation levels in the experiment. By utilizing the proposed method, the number of possible input key combination is increased from 256 to 810,000 with three muscle levels.

IP Camera Based Network Video Surveillance Mobile Security System

In this paper, we proposed a mobile security system based on IP camera network video surveillance by improving the traditional monitoring methods. This system includes three parts: Android mobile client, cloud server, IP camera monitoring terminals. By setting IP cameras at 24 fps but only sending one frame each second, we can infer the situation by analyzing of the single image and reduce the amount of data transmission. User can check the live scenes and send control commands to monitoring terminal or receive the push information from the server to freely give alarm signal to users anytime, anywhere. And users can also select any regions or any specific objects to monitor, the server will real-time monitor each scene according to the specific requirements by using the algorithms of image contrast and depth estimation. The experiment results show that the system can greatly improve the accuracy of the alarm.

Editorial for MobiCASE 2011 Special Issue

Editorial: This special issue features five selected papers with high quality from the Third International Conference on Mobile Computing, Applications and Services (MobiCASE 2011), which was held in Los Angeles, CA, USA, October 24–27, 2011. The first article, “Cross-Compiling Android Applications to iOS andWindows Phone 7”, co-authored by A. Puder and O. Antebi, considers a cross compilation approach, whereby Android applications are cross-compiled to C for iOS and to C# for Windows Phone 7. This paper describes different aspects of the cross-compiler, from byte code level cross-compilation to API mapping. A prototype of this work (XMLVM) is available under an Open Source license. The second article titled “Mobile Decentralized Search and Retrieval Using SMS and HTTP” from I. M. Lombera, L. E. Moser, P. M. Melliar-Smith and Y-T. Chuang, describes a decentralized search and retrieval system, named iTrust, that provides resistance against the vulnerabilities of centralized services. The SMS interface and the iTrust SMSHTTP bridge enable SMS-capable mobile phones to communicate with and obtain information from HTTP nodes in the iTrust network. iTrust over SMS protocol enables mobile phones to communicate directly with each other and share information in a peer-to-peer fashion bypassing the Internet. This paper also describes the Android user interface, which builds on the basic SMS capabilities of mobile phones and offers a user-friendly way of accessing the iTrust with SMS or iTrust over SMS implementation. In “Mobile Networks and Applications: A Mobile App Search Engine” the authors investigate a mobile App search engine. The authors (A. Datta, K. Dutta, S. Kajanan and N. Pervin) proposed an independent unbiased search engine Mobilewalla for mobile apps with semantic search capabilities. It has also developed an objective scoring mechanism based on user and developer involvement with an app. The scoring mechanism enables Mobilewalla to provide a number of other ways to discover apps—such as dynamically maintained ‘hot’ lists and ‘fast rising’ lists. The fourth article, “MobiSens: AVersatile Mobile Sensing Platform for Real-world Applications,” from P. Wu, J. Zhu and Y. Zhang, discusses a versatile mobile sensing platform for a variety of real-life mobile sensing applications. MobiSens addresses common requirements of mobile sensing applications on power optimization, activity segmentation, recognition and annotation, interaction between mobile client and server, motivating users to provide activity labels with convenience and privacy concerns. Based on the MobiSens platform, authors have developed a range of mobile sensing applications including Mobile Lifelogger, SensCare for assisted living, Ground Reporting for soldiers to share their positions and actions horizontally and vertically, and CMU SenSec, a behavior-driven mobile Security system. In the last article with the title “Design and Implementation of a Toolkit for Usability Testing of Mobile Apps,” the authors (X. Ma, B. Yan, G. Chen, C. Zhang, K. Huang, J. Drury and L. Wang) describes a toolkit that embeds into mobile applications the ability to automatically collect user J. Zhang (*) Silicon Valley Campus, Carnegie Mellon University, Pittsburgh, PA, USA e-mail: joy.zhang@sv.cmu.edu

MobiSens: A Versatile Mobile Sensing Platform for Real-World Applications

We present the design, implementation and evaluation of MobiSens, a versatile mobile sensing platform for a variety of real-life mobile sensing applications. MobiSens addresses common requirements of mobile sensing applications on power optimization, activity segmentation, recognition and annotation, interaction between mobile client and server, motivating users to provide activity labels with convenience and privacy concerns. After releasing three versions of MobiSens to the Android Market with evolving UI and increased functionalities, we have collected 13,993 h of data from 310 users over five months. We evaluate and compare the user experience and the sensing efficiency in each release. We show that the average number of activities annotated by a user increases from 0.6 to 6. This result indicates the activity auto-segmentation/recognition feature and certain UI design changes significantly improve the user experience and motivate users to use MobiSens more actively. Based on the MobiSens platform, we have developed a range of mobile sensing applications including Mobile Lifelogger, SensCare for assisted living, Ground Reporting for soldiers to share their positions and actions horizontally and vertically, and CMU SenSec, a behavior-driven mobile Security system.

SELinux 기반 안드로이드 보안시스템 구축에 관한 연구

최근 고성능의 스마트 폰이 속속 등장하면서 스마트 폰의 보안 문제가 대두되고 있다. 특히 오픈 플랫폼의 경우엔 더욱 바이러스의 타겟이 되기 쉬워졌다. 또한, 시만텍, 안철수연구소 등 많은 보안솔루션 업체들이 모바일 보안 시스템을 개발하고 있지만, 아직 Android 관련 보안 프로그램은 상용화된 제품이 없는 실정이다. 이러한 문제를 사전에 해결하기 위해 오픈 플랫폼 중의 하나인 Android 상에 일반 Linux에서 동작하는 SELinux를 사용할 수 있도록 환경을 구축하여 Android 시스템의 보안 기능을 개발하였으며, S3C6410 상에서 사용자 어플리케이션을 검증하였다. 【As soon as high-performanced smart phones is rapidly emerging in recent, its security problems come to the front. Especially in case of an open platform, it is easy to be a target of virus. Many security solution industries such as Symantec and Ahnlab are developing a mobile security system, but they have not yet a commercial product. We developed the effective security function of Android system based on SELinux to solve this problem, and verified its performance by applying the user applications developed to S3C6410 board.】

NSG : 비선형 알고리즘을 이용한 블루투스 E0암호화시스템의 성능 개선

합산수열 발생기는 간단한 하드웨어 또는 소프트웨어로 구현될 수 있고, 주기와 선형복잡도가 높은 특징이 있어 유비쿼터스 시대의 이동환경 보안장치에 적합하다. 하지만 Golic의 상관성공격과 Meier의 고속 상관성공격에 의해 취약성이 노출되었다. 본 논문에서는 합산 수열 발생기 형태의 <TEX>$E_0$</TEX> 알고리즘에서 LFSR과 비선형 귀환 이동 레지스터 NFSR(nonlinear feedback shift register) 를 조합한 형태로 개선하여 비선형성을 높이고, 상관성 공격 등의 암호해독이 어려운 새로운 알고리즘 NSG를 제안하고, 제안 알고리즘에 대하여 안전성 및 성능을 분석하였다. Summation generator can be easily made as a simple hardware or software and it's period and linear complexity are very high. So it is appropriate to mobile security system for ubiquitous environment. But it showed us the weakness by Golic's correlation attack and Meier's fast correlation attack. In this paper, we proposed a Nonlinear Summation Generator(NSG), which is improved by using LFSR and NFSR(nonlinear feedback shift register), is different from <TEX>$E_0$</TEX> algorithm which use only LFSR in summation generator. It enhanced nonlinearity and is hard to decipher even though the correlation attack or fast correlation attack. We also analyzed the security aspects and the performances for the proposed algorithm.

Actual Condition and Issues for Mobile Security System

The high-speed mobile Internet has recently been expanded, many attractive services are provided. However, these services require some form of security-related technology. This paper outlines Japanese mobile services and exposits some mobile security topics including mobile spam, mobile malware, mobile DRM system, mobile WiMAX security, and mobile key management.

Mobile application security system (MASS)

Security is an important factor in any network, but particularly in a wireless ad-hoc network in which mobile applications are employed to perform various tasks. By mobile applications, we mean applications that can support both moving nodes (e.g., transmitter/receiver mounted on a moving vehicle) and migrating code (i.e., code that can transport itself via wireless link from one execution node to another). These networks remain more vulnerable to compromise by malicious applications and hosts due to their innate characteristic of no clear line of defense. We devised a potential solution to this problem that addresses critical aspects of security in ad-hoc mobile application networks. This approach involves preventing unauthorized modification of a mobile application, both by other applications and by hosts, and ensuring that mobile code is authentic and authorized. These capabilities constitute the Mobile Application security system (mass). The MASS applies effective, robust security to mobile application-based systems, wireless, and wired networks while minimizing overhead requirements. The MASS consists of innovative security techniques that provide distributed security solutions for mobile application networks.

Development of Mobile Security Systems and their Customer Service Applications

Development of Mobile Security Systems and their Customer Service Applications