TC: Medium: Collaborative Research: Building Trustworthy Applications for Mobile Devices

智能手机、掌上电脑和智能媒体播放器等移动手持设备的增长速度超过了有线主机，正在成为互联网接入的主要工具。近年来，更新的手机，包括苹果、谷歌、诺基亚等公司的各种版本，促进了更大的可编程性，从根本上改变了手机作为封闭平台的古老模式。然而，开放伴随着可信度的新挑战而来。该项目的目标是通过分析恶意软件或常规应用程序造成的威胁，设计缓解策略，并通过在智能手机平台(Google Android)和真实网络(Sprint-Nextel)上的实际部署来评估开发的解决方案，从而提高手机在日常运营中的可信度。该项目将进行横向研究、教育和推广计划，以提高手机的健壮性、可靠性、安全性、隐私和总体可信性。该项目的主要重点将是移动电话特有的性能和安全威胁，包括过滤数据的恶意应用程序、由于资源限制而造成的性能损失、丢失设备的隐私威胁以及基于网络的远程攻击。具体地说，该项目将调查与以下主题相关的问题：(I)由于资源限制而导致的性能不稳定(Ii)针对恶意应用程序的保护(Iii)针对丢失手机的隐私(Iv)检测和防止其他网络攻击。所开发的技术将为研究和社会带来广泛的好处。这些技术将增强手机的可信性，从而提高用户在日常活动中使用这些设备的信心。一项教育计划将引入以手机平台为中心的新课程，并建立一个新的本科生移动设备编程动手实验室。

Mobile handheld devices such as smartphones, PDAs, and smart media players have outpaced the growth of wired hosts, and are emerging as the predominant vehicle for Internet access. In recent years, newer mobile phones, including various versions from Apple, Google, Nokia, and others, have promoted greater programmability, radically changing the age-old model of mobile phones being a closed platform. However, openness arrives with new challenges of trustworthiness. The goal of this project is to improve the trustworthiness of mobile phones in their daily operations, by analyzing threats that occur either due to malware or due to regular applications, designing mitigation strategies, and evaluating developed solutions through a real deployment on a smartphone platform (Google Android) and operating in a real network (Sprint-Nextel).This project will undertake crosscutting research, educational, and outreach plan to improve the robustness, reliability, security, privacy, and overall trustworthiness of mobile phones. The primary focus of this project will be on performance and security threats that are unique to mobile phones, including malicious applications that ex-filtrate data, performance loss due to resource constraints, privacy threats of lost devices, and remote network-based attacks. Specifically, this project will investigate issues related to following topics: (i) performance instability due to resource constraints (ii) protection against malicious applications (iii) privacy against lost phones (iv) detection and prevention against other network attacks. Techniques developed will have broad benefits to research and society. These techniques will enhance the trustworthiness of mobile phones, thereby improving the confidence of users in using these devices in their daily activities. An educational plan will introduce new curriculum centered on the mobile phone platform and establishes a new undergraduate laboratory for hands-on mobile device programming.