(Press-News.org) Computer security researchers from North Carolina State University and Technische Universität Darmstadt/CASED in Germany have developed a modification to the core Android operating system that allows developers and users to plug in new security enhancements. The new Android Security Modules (ASM) framework aims to eliminate the bottleneck that prevents developers and users from taking advantage of new security tools.
"In the ongoing arms race between white hats and black hats, researchers and developers are constantly coming up with new security extensions," says Dr. William Enck, an assistant professor of computer science at NC State and a senior author of a paper describing the new framework. "But these new tools aren't getting into the hands of users because every new extension requires users to change their device's firmware, or operating system (OS).
"The ASM framework allows users to implement these new extensions without overhauling their firmware," Enck says. "The framework is available now for security enthusiasts. But for widespread adoption, either Google or one of the Android phone manufacturers will need to adopt the framework and incorporate it into the OS."
The ASM framework allows the creation of custom security control modules that better protect phones owned by consumers and businesses. The custom security modules receive "callbacks" for every security-sensitive operation in the Android OS. In this context, a callback means that Android is contacting the security module to determine whether an operation should proceed.
"Our ASM framework can be used in various personal and enterprise scenarios. For instance, security modules can implement dual persona: i.e., enable users to securely use their smartphones and tablets at home and at work while strictly separating private and enterprise data," says Enck.
"Security modules can also enhance consumer privacy. The framework provides callbacks that can filter, modify, or anonymize data before it is shared with third-party apps, in order to protect personal information," Enck says. "For instance consider an app like Whatsapp, which usually copies all your contacts to its server – which is not needed for it to function." With ASM, the user can make sure Whatsapp only gets the information it really needs.
"In addition, we designed the framework to allow apps to create their own hooks, which could be enforced by the security module," Enck says. "This increases flexibility for app developers and allows them to benefit from the security protections provided by the module."
The researchers also went to great lengths to ensure that the ASM framework complies with the security guarantees Google and others make with app developers. For example, the framework can only make data access more restrictive.
The researchers will present a paper on the ASM framework Aug. 22 at the USENIX Security Symposium in San Diego, California. The researchers are now reaching out to Google and Android phone manufacturers to demonstrate the effectiveness of the ASM framework. More information on the ASM framework, including sourcecode, is available at http://www.androidsecuritymodules.org.
INFORMATION:
Co-lead authors of the paper, "ASM: A Programmable Interface for Extending Android Security," are Adwait Nadkarni, a Ph.D. student at NC State, and Stephan Heuser, a Ph.D. student at TU Darmstadt/CASED. Co-authors include Enck and Dr. Ahmad-Reza Sadeghi, of TU Darmstadt/CASED. The work was supported by National Science Foundation grants CNS-1253346 and CNS-1222680.
New framework would facilitate use of new Android security modules
2014-08-20
ELSE PRESS RELEASES FROM THIS DATE:
Worker bees 'know' when to invest in their reproductive future
2014-08-20
When a colony of honeybees grows to about 4,000 members, it triggers an important first stage in its reproductive cycle: the building of a special type of comb used for rearing male reproductive, called drones. A team of experts from the Department of Neurobiology and Behaviour at Cornell University, led by Michael Smith, studied what starts the reproductive cycle of honeybee colonies. The results are published in Springer's journal Naturwissenschaften - The Science of Nature.
Reproduction isn't always a honeybee colony's top priority. Early in a colony's development, ...
Research paves way for development of cyborg moth 'biobots'
2014-08-20
North Carolina State University researchers have developed methods for electronically manipulating the flight muscles of moths and for monitoring the electrical signals moths use to control those muscles. The work opens the door to the development of remotely-controlled moths, or "biobots," for use in emergency response.
"In the big picture, we want to know whether we can control the movement of moths for use in applications such as search and rescue operations," says Dr. Alper Bozkurt, an assistant professor of electrical and computer engineering at NC State and co-author ...
Abusive leadership infects entire team
2014-08-20
EAST LANSING, Mich. --- Supervisors who are abusive to individual employees can actually throw the entire work team into conflict, hurting productivity, finds new research led by a Michigan State University business scholar.
The study, conducted in China and the United States, suggests the toxic effect of nonphysical abuse by a supervisor is much broader than believed. Published online in the Journal of Applied Psychology, it's one of the first studies to examine the effect of bad bosses in employee teams. Teams are increasingly popular in the business world.
Lead ...
Scientists show type-1 and type-2 diabetes are caused by same underlying mechanism
2014-08-20
Work by scientists at the Universities of Manchester and Auckland suggest that both major forms of diabetes are the result of the same mechanism.
The findings, published today in the FASEB Journal (20 August), provide compelling evidence that juvenile-onset or type-1 diabetes and type-2 diabetes are both caused by the formation of toxic clumps of a hormone called amylin.
The results, based on 20 years' work in New Zealand, suggest that type-1 and type-2 diabetes could both be slowed down and potentially reversed by medicines that stop amylin forming these toxic clumps. ...
A semi-artificial leaf faster than 'natural' photosynthesis
2014-08-20
In leaves, photosystem 1 (PS1) absorbs light and its energy is finally utilized for the conversion of carbon dioxide to biomass. Photovoltaic devices, mostly build from silicon based semiconductors, also harness solar light but produce electricity. One approach for the development of cheaper and renewable photovoltaics consists in replacing the semi-conductor with the isolated membrane protein complexes of photosynthesis. Prof. Dr. Matthias Rögner's team isolates a highly stable PS1 from thermophilic cyanobacteria that live in a hot spring in Japan. However, the integration ...
A spectacular landscape of star formation
2014-08-20
NGC 3603 is a very bright star cluster and is famed for having the highest concentration of massive stars that have been discovered in our galaxy so far. At the centre lies a Wolf–Rayet multiple star system, known as HD 97950. Wolf–Rayet stars are at an advanced stage of stellar evolution, and start off with around 20 times the mass of the Sun. But, despite this large mass, Wolf–Rayet stars shed a considerable amount of their matter due to intense stellar winds , which blast the star's surface material off into space at several million kilometres per hour, a crash diet ...
Research helps explain why elderly have trouble sleeping
2014-08-20
BOSTON – As people grow older, they often have difficulty falling asleep and staying asleep, and tend to awaken too early in the morning. In individuals with Alzheimer's disease, this common and troubling symptom of aging tends to be especially pronounced, often leading to nighttime confusion and wandering.
Now, a study led by researchers at Beth Israel Deaconess Medical Center (BIDMC) and the University of Toronto/Sunnybrook Health Sciences Center helps explain why sleep becomes more fragmented with age. Reported online today in the journal Brain, the new findings demonstrate ...
Is China's 50 percent cesarean section delivery rate too high?
2014-08-20
Efforts must be made to decrease China's increasing caesarean section rate, suggests a new commentary published today (20 August) in BJOG: An International Journal of Obstetrics and Gynaecology (BJOG).
China has one of the highest caesarean delivery rates in the world. Of 16 million babies born in 2010, approximately half were by caesarean. Although the exact rate is not known, the current Chinese language literature on caesarean rates in China reports total caesarean rates ranging from 36% to 58%. However, before the 1980s, the caesarean rate was below 5% and it did ...
Review of clinical treatment of bronchiolitis in infants reveals over-reliance on one test
2014-08-20
(Boston) – An editorial published in this week's JAMA highlights the importance of physicians using all available clinical assessment tools when considering how to treat patients. Written by Robert Vinci, MD, chief of pediatrics at Boston Medical Center and chair of pediatrics at Boston University School of Medicine and Howard Bauchner, MD, editor-in-chief of JAMA, the editorial examines results of a study published in the same issue of the journal as an example of how doctors can often over-emphasize certain types of data.
The study examined how pediatric emergency medicine ...
Growing up poor affects adults' sense of control, impulsiveness when faced with economic uncertainty
2014-08-20
WASHINGTON - Growing up poor can influence people's sense of control and in turn may lead them to more impulsive decision-making and quickly give up on challenging tasks in uncertain situations, according to new research published by the American Psychological Association.
"Two people with different childhood backgrounds are likely to respond to uncertainty in different ways, even if as adults they have a similar socioeconomic status (SES). We found that adults who grew up poor were more inclined to consider difficult and uncertain living conditions as beyond their control, ...