Virtualized in-cloud security services for mobile devices

Subscribe (Full Service)


	Search: The ACM Digital Library The Guide

	Feedback

Virtualized in-cloud security services for mobile devices

Full text

Pdf (618 KB)

Source

International Conference On Mobile Systems, Applications And Services archive
Proceedings of the First Workshop on Virtualization in Mobile Computing table of contents

Breckenridge, Colorado

SESSION: Security table of contents

Pages 31-35

Year of Publication: 2008

ISBN:978-1-60558-328-0

Authors

Jon Oberheide	University of Michigan, Ann Arbor, MI
Kaushik Veeraraghavan	University of Michigan, Ann Arbor, MI
Evan Cooke	University of Michigan, Ann Arbor, MI
Jason Flinn	University of Michigan, Ann Arbor, MI
Farnam Jahanian	University of Michigan, Ann Arbor, MI

Publisher

ACM New York, NY, USA

Bibliometrics

Downloads (6 Weeks): 31, Downloads (12 Months): 31, Citation Count: 0

Additional Information:

abstract references index terms

Tools and Actions:	Request Permissions Review this Article Save this Article to a Binder Display Formats: BibTeX EndNote ACM Ref

DOI Bookmark:	Use this link to bookmark this Article: http://doi.acm.org/10.1145/1622103.1629656 What is a DOI?

ABSTRACT

Modern mobile devices continue to approach the capabilities and extensibility of standard desktop PCs. Unfortunately, these devices are also beginning to face many of the same security threats as desktops. Currently, mobile security solutions mirror the traditional desktop model in which they run detection services on the device. This approach is complex and resource intensive in both computation and power. This paper proposes a new model whereby mobile antivirus functionality is moved to an off-device network service employing multiple virtualized malware detection engines. Our argument is that it is possible to spend bandwidth resources to significantly reduce on-device CPU, memory, and power resources. We demonstrate how our in-cloud model enhances mobile security and reduces on-device software complexity, while allowing for new services such as platform-specific behavioral analysis engines. Our benchmarks on Nokia's N800 and N95 mobile devices show that our mobile agent consumes an order of magnitude less CPU and memory while also consuming less power in common scenarios compared to existing on-device antivirus software.

REFERENCES

Note: OCR errors may be found in this Reference List extracted from the full text article. ACM has opted to expose the complete List rather than only correct and linked references.

	1	P. Chen and B. Noble. When virtual is better than real. Proceedings of the 2001 Workshop on Hot Topics in Operating Systems (HotOS), pages 133--138, 2001.
	2	L. Cox and P. Chen. Pocket Hypervisors: Opportunities and Challenges. Proceedings of HotMobile, 2007.
	3	F-Secure Corporation. F-secure mobile anti-virus. http://mobile.f-secure.com/, 2008.
	4	J. Flinn, D. Narayanan, and M. Satyanarayanan. Self-tuned remote execution for pervasive computing. In Proceedings of the 8th Workshop on Hot Topics in Operating Systems (HotOS-VIII), pages 61--66, Schloss Elmau, Germany, May 2001.
	5	A. Fox, S. Gribble, E. Brewer, and E. Amir. Adapting to network and client variability via on-demand dynamic distillation. ACM SIGPLAN Notices, 31(9):160--170, 1996.
	6	Google. Android - an open handset alliance project. http://code.google.com/android/, 2008.
	7	Google. Google safe browsing. http://code.google.com/apis/safebrowsing/, 2008.
	8	Kaspersky Lab. Kaspersky mobile security. http://usa.kaspersky.com/products_services/mobile-security.php, 2008.
	9	T. Kunz and S. Omar. A mobile code toolkit for adaptive mobile applications. In Proceedings of the 3rd IEEE Workshop on Mobile Computing Systems and Applications, pages 51--59, Monterey, CA, December 2000.
	10	Nokia Corporation. Maemo sdk. http://maemo.org/, 2008.
	11	Nullriver, Inc. iphone installer.app. http://iphone.nullriver.com/, 2008.
	12	J. Oberheide, E. Cooke, and F. Jahanian. Rethinking antivirus: Executable analysis in the network cloud. In 2nd USENIX Workshop on Hot Topics in Security (HotSec 2007), August 2007.
	13	J. Oberheide, E. Cooke, and F. Jahanian. Cloudav: N-version antivirus in the network cloud. July 2008. To Appear in the Proceedings of the 17th USENIX Security Symposium.
	14	J. Ogness. Dazuko: An open solution to facilitate on-access scanning. Virus Bulletin, 2003.
	15	A. Rudenko, P. Reiher, G. J. Popek, and G. H. Kuenning. The Remote Processing Framework for portable computer power saving. In Proceedings of the ACM Symposium on Applied Computing, San Antonio, TX, February 1999.
	16	Sourcefire, Inc. Clamav antivirus. http://www.clamav.net/, 2008.
	17	Symantec Corporation. Symantec mobile antivirus for windows mobile. http://www.symantec.com/norton/products/overview.jsp?pcid=pf&pvid=smavw%m, 2008.
	18	K. Veeraraghavan, E. Nightingale, J. Flinn, and B. Noble. qufiles: a unifying abstraction for mobile data management. In The Ninth Workshop on Mobile Computing Systems and Applications (HotMobile 2008), February 2008.
	19	B. Zenel. A general purpose proxy filtering mechanism applied to the mobile environment. Wireless Networks, 5(5):391--409, 1999.