TC: Medium: Collaborative Research: Building Trustworthy Applications for Mobile Devices

诸如智能电话、PDA和智能媒体播放器之类的移动的手持设备已经超过了有线主机的增长速度，并且正在成为互联网接入的主要载体。近年来，更新的移动的电话，包括来自苹果、谷歌、诺基亚和其他公司的各种版本，已经促进了更大的可编程性，从根本上改变了作为封闭平台的移动的电话的古老模式。然而，开放性带来了新的可信度挑战。该项目的目标是通过在智能手机平台上进行真实的部署，分析恶意软件或常规应用程序造成的威胁，设计缓解策略，并评估开发的解决方案，从而提高移动的手机在日常操作中的可信度（Google Android）并在真实的网络中运行（Sprint-Nextel）。该项目将开展横向研究、教育和推广计划，以提高移动的电话的稳健性、可靠性、安全性、隐私性和整体可信度。该项目的主要重点将是移动的手机所特有的性能和安全威胁，包括泄露数据的恶意应用程序、由于资源限制而导致的性能损失、丢失设备的隐私威胁以及基于远程网络的攻击。具体而言，该项目将调查与以下主题相关的问题：（i）由于资源限制导致的性能不稳定（ii）防止恶意应用程序（iii）防止丢失手机的隐私（iv）检测和预防其他网络攻击。所开发的技术将对研究和社会产生广泛的好处。这些技术将提高移动的电话的可信度，从而提高用户在日常活动中使用这些设备的信心。 一项教育计划将引入以移动的手机平台为中心的新课程，并建立一个新的本科生实验室，用于实践移动终端编程。

Mobile handheld devices such as smartphones, PDAs, and smart media players have outpaced the growth of wired hosts, and are emerging as the predominant vehicle for Internet access. In recent years, newer mobile phones, including various versions from Apple, Google, Nokia, and others, have promoted greater programmability, radically changing the age-old model of mobile phones being a closed platform. However, openness arrives with new challenges of trustworthiness. The goal of this project is to improve the trustworthiness of mobile phones in their daily operations, by analyzing threats that occur either due to malware or due to regular applications, designing mitigation strategies, and evaluating developed solutions through a real deployment on a smartphone platform (Google Android) and operating in a real network (Sprint-Nextel).This project will undertake crosscutting research, educational, and outreach plan to improve the robustness, reliability, security, privacy, and overall trustworthiness of mobile phones. The primary focus of this project will be on performance and security threats that are unique to mobile phones, including malicious applications that ex-filtrate data, performance loss due to resource constraints, privacy threats of lost devices, and remote network-based attacks. Specifically, this project will investigate issues related to following topics: (i) performance instability due to resource constraints (ii) protection against malicious applications (iii) privacy against lost phones (iv) detection and prevention against other network attacks. Techniques developed will have broad benefits to research and society. These techniques will enhance the trustworthiness of mobile phones, thereby improving the confidence of users in using these devices in their daily activities. An educational plan will introduce new curriculum centered on the mobile phone platform and establishes a new undergraduate laboratory for hands-on mobile device programming.