TC: Medium: Collaborative Research: Building Trustworthy Applications for Mobile Devices

移动手持设备（如智能手机、pda和智能媒体播放器）的增长速度超过了有线主机，并正在成为互联网访问的主要工具。近年来，更新的移动电话，包括来自苹果、b谷歌、诺基亚和其他公司的各种版本，都提高了更大的可编程性，从根本上改变了移动电话作为封闭平台的古老模式。然而，开放伴随着可信度的新挑战而来。该项目的目标是通过分析恶意软件或常规应用程序造成的威胁，设计缓解策略，并通过在智能手机平台（b谷歌Android）上的真实部署和在真实网络（Sprint-Nextel）中运行来评估开发的解决方案，从而提高移动电话在日常操作中的可信度。该项目将进行横切研究、教育和推广计划，以提高移动电话的稳健性、可靠性、安全性、隐私性和整体可信度。该项目的主要重点将放在移动电话特有的性能和安全威胁上，包括泄露数据的恶意应用程序、由于资源限制导致的性能损失、丢失设备的隐私威胁以及基于远程网络的攻击。具体而言，该项目将调查与以下主题相关的问题：(i)由于资源限制而导致的性能不稳定；（ii）防止恶意应用程序的保护；（iii）防止丢失手机的隐私；（iv）检测和预防其他网络攻击。所开发的技术将对研究和社会产生广泛的好处。这些技术将提高手机的可信度，从而提高用户在日常活动中使用这些设备的信心。一项教育计划将引入以手机平台为中心的新课程，并建立一个新的本科生动手移动设备编程实验室。

Mobile handheld devices such as smartphones, PDAs, and smart media players have outpaced the growth of wired hosts, and are emerging as the predominant vehicle for Internet access. In recent years, newer mobile phones, including various versions from Apple, Google, Nokia, and others, have promoted greater programmability, radically changing the age-old model of mobile phones being a closed platform. However, openness arrives with new challenges of trustworthiness. The goal of this project is to improve the trustworthiness of mobile phones in their daily operations, by analyzing threats that occur either due to malware or due to regular applications, designing mitigation strategies, and evaluating developed solutions through a real deployment on a smartphone platform (Google Android) and operating in a real network (Sprint-Nextel).This project will undertake crosscutting research, educational, and outreach plan to improve the robustness, reliability, security, privacy, and overall trustworthiness of mobile phones. The primary focus of this project will be on performance and security threats that are unique to mobile phones, including malicious applications that ex-filtrate data, performance loss due to resource constraints, privacy threats of lost devices, and remote network-based attacks. Specifically, this project will investigate issues related to following topics: (i) performance instability due to resource constraints (ii) protection against malicious applications (iii) privacy against lost phones (iv) detection and prevention against other network attacks. Techniques developed will have broad benefits to research and society. These techniques will enhance the trustworthiness of mobile phones, thereby improving the confidence of users in using these devices in their daily activities. An educational plan will introduce new curriculum centered on the mobile phone platform and establishes a new undergraduate laboratory for hands-on mobile device programming.