usenix conference policies
Mandatory Access Control for the Android Dalvik Virtual Machine
Error message
You are not authorized to post comments.Aline Bousquet and Jérémy Briffaut, LIFO - ENSI de Bourges; Laurent Clevy, Alcatel-Lucent Bell Labs; Christian Toinard, LIFO - ENSI de Bourges; Benjamin Venelle, Alcatel-Lucent Bell Labs
With the growing use of smartphones and other mobile devices, it becomes essential to be able to assure the user that his system and applications are doing exactly what they are supposed to do. Over the years and despite its configuration complexity, Mandatory Access Control has proven its efficiency in protecting systems. This paper proposes a solution providing a generic protection that doesn’t need to modify the applications. Moreover, in order to face the complexity of defining an efficient MAC policy, a tool automatizes the generation of the policies required for the various applications.
However, to efficiently guarantee the security of a system, each layer that composes it must be secured. Therefore, MAC implementations should not be limited to the operating system, but should also protect the inside of the applications.
This paper presents Security Enhanced Dalvik (SEDalvik), a MAC approach for the Dalvik Virtual Machine in order to control the flows inside the Java applications running in Android.
SEDalvik proposes a new mandatory protection to block the attacks that exploit the weakness of the Dalvik VM. By controlling the information flows between the Java objects, SEDalvik could prevent the new vectors of attack coming from the threat of the Java virtual machine as explained by Kaspersky Labs1. In contrast with other approaches, our solution corresponds to a self-organizing system since it transparently protects existing Java applications without any modifications. An experiment on an Android phone shows the efficiency of the protection.
Open Access Media
USENIX is committed to Open Access to the research presented at our events. Papers and proceedings are freely available to everyone once the event begins. Any video, audio, and/or slides that are posted after the event are also free and open to everyone. Support USENIX and our commitment to Open Access.
author = {Aline Bousquet and J{\'e}r{\'e}my Briffaut and Laurent Clevy and Christian Toinard and Benjamin Venelle},
title = {Mandatory Access Control for the Android Dalvik Virtual Machine},
booktitle = {2013 Workshop on Embedded Self-Organizing Systems (ESOS 13)},
year = {2013},
address = {San Jose, CA},
url = {https://www.usenix.org/conference/esos13/workshop-program/presentation/bousquet},
publisher = {USENIX Association},
month = jun
}
connect with us