TC: Medium: Collaborative Research: Program Analysis for Smartphone Application Security
TC:媒介:协作研究:智能手机应用程序安全的程序分析
基本信息
- 批准号:1064997
- 负责人:
- 金额:$ 43.34万
- 依托单位:
- 依托单位国家:美国
- 项目类别:Standard Grant
- 财政年份:2011
- 资助国家:美国
- 起止时间:2011-04-15 至 2017-03-31
- 项目状态:已结题
- 来源:
- 关键词:
项目摘要
This project investigates a new approach for describing and reasoning about security properties of smartphone applications. Smartphones are becoming pervasive, and smartphone applications are increasingly used for a variety of social, health, scientific, and military purposes. However, the capabilities these phones provide, such as access to GPS, camera, Internet, calendar, contacts, and other sensitive information can lead to major security risks. Today's smartphone development methodologies do little to help developers construct applications that safely access sensitive resources.The goal of this project is to develop new program analysis techniques that can help developers express, reason about, and enforce security policies in smartphones. The proposed technical approach will allow developers to define rich security policies in an intuitive and flexible manner: as program code that interacts with a mobile application and checks desired properties. To ensure that application code conforms to such policies, the project is pursuing several techniques that leverage recent advances in static and dynamic program analysis. The project is also investigating approaches to automatically synthesize a code-based policy for a given application. The project is instantiating these ideas in the context of Google's Android operating system, and is evaluating the ideas in terms of effectiveness and performance on a broad range of Android-based smartphone applications.
该项目研究了一种新的方法来描述和推理智能手机应用程序的安全属性。 智能手机变得越来越普及,智能手机应用程序越来越多地用于各种社会,健康,科学和军事目的。然而,这些手机提供的功能,如访问GPS、相机、互联网、日历、联系人和其他敏感信息,可能会导致重大的安全风险。 今天的智能手机开发方法论并不能帮助开发人员构建安全访问敏感资源的应用程序。本项目的目标是开发新的程序分析技术,帮助开发人员在智能手机中表达、推理和执行安全策略。 所提出的技术方法将允许开发人员以直观和灵活的方式定义丰富的安全策略:作为与移动的应用程序交互并检查所需属性的程序代码。 为了确保应用程序代码符合这样的政策,该项目正在寻求几种技术,利用静态和动态程序分析的最新进展。 该项目还在研究为特定应用程序自动合成基于代码的策略的方法。该项目正在Google的Android操作系统中实例化这些想法,并正在评估这些想法在广泛的基于Android的智能手机应用程序上的有效性和性能。
项目成果
期刊论文数量(0)
专著数量(0)
科研奖励数量(0)
会议论文数量(0)
专利数量(0)
数据更新时间:{{ journalArticles.updateTime }}
{{
item.title }}
{{ item.translation_title }}
- DOI:
{{ item.doi }} - 发表时间:
{{ item.publish_year }} - 期刊:
- 影响因子:{{ item.factor }}
- 作者:
{{ item.authors }} - 通讯作者:
{{ item.author }}
数据更新时间:{{ journalArticles.updateTime }}
{{ item.title }}
- 作者:
{{ item.author }}
数据更新时间:{{ monograph.updateTime }}
{{ item.title }}
- 作者:
{{ item.author }}
数据更新时间:{{ sciAawards.updateTime }}
{{ item.title }}
- 作者:
{{ item.author }}
数据更新时间:{{ conferencePapers.updateTime }}
{{ item.title }}
- 作者:
{{ item.author }}
数据更新时间:{{ patent.updateTime }}
Jeffrey Foster其他文献
Large language models (LLMs) and the institutionalization of misinformation
- DOI:
10.1016/j.tics.2024.08.007 - 发表时间:
2024-12-01 - 期刊:
- 影响因子:
- 作者:
Maryanne Garry;Way Ming Chan;Jeffrey Foster;Linda A. Henkel - 通讯作者:
Linda A. Henkel
Antimicrobial Peptide C18G binds to Lipid Bilayers in a Lipid Composition Dependent Manner
- DOI:
10.1016/j.bpj.2008.12.700 - 发表时间:
2009-02-01 - 期刊:
- 影响因子:
- 作者:
Emmanuel Yawson;Jeffrey Foster;Gregory A. Caputo - 通讯作者:
Gregory A. Caputo
Jeffrey Foster的其他文献
{{
item.title }}
{{ item.translation_title }}
- DOI:
{{ item.doi }} - 发表时间:
{{ item.publish_year }} - 期刊:
- 影响因子:{{ item.factor }}
- 作者:
{{ item.authors }} - 通讯作者:
{{ item.author }}
{{ truncateString('Jeffrey Foster', 18)}}的其他基金
QCIS-FF: Quantum Computing & Information Science Faculty Fellow at Tufts University
QCIS-FF:量子计算
- 批准号:
2013062 - 财政年份:2021
- 资助金额:
$ 43.34万 - 项目类别:
Continuing Grant
FMitF: Track II: Transitioning Ruby Types to Practice
FMITF:轨道 II:将 Ruby 类型转变为实践
- 批准号:
1918233 - 财政年份:2019
- 资助金额:
$ 43.34万 - 项目类别:
Standard Grant
SHF: Small: Specifying, Checking, and Analyzing Applications Built with Dynamic Language Frameworks
SHF:小型:指定、检查和分析使用动态语言框架构建的应用程序
- 批准号:
1319666 - 财政年份:2013
- 资助金额:
$ 43.34万 - 项目类别:
Standard Grant
Collaborative Research: Expeditions in Computer Augmented Program Engineering (ExCAPE): Harnessing Synthesis for Software Design
协作研究:计算机增强程序工程探险 (ExCAPE):利用综合进行软件设计
- 批准号:
1139021 - 财政年份:2012
- 资助金额:
$ 43.34万 - 项目类别:
Continuing Grant
SHF: Small: Empirical Studies, Principles and Techniques for Software Systems with Complex Configuration Spaces
SHF:小型:具有复杂配置空间的软件系统的实证研究、原理和技术
- 批准号:
1116740 - 财政年份:2011
- 资助金额:
$ 43.34万 - 项目类别:
Standard Grant
SHF: Small: User-Centered Software Analysis Tools
SHF:小型:以用户为中心的软件分析工具
- 批准号:
0915978 - 财政年份:2009
- 资助金额:
$ 43.34万 - 项目类别:
Standard Grant
CT-T: Collaborative Research: Complex, High-level, Integrated Properties for Security
CT-T:协作研究:复杂、高级、集成的安全属性
- 批准号:
0715650 - 财政年份:2007
- 资助金额:
$ 43.34万 - 项目类别:
Standard Grant
CAREER: Programming Languages Techniques for Enhancing Software Quality
职业:提高软件质量的编程语言技术
- 批准号:
0346982 - 财政年份:2004
- 资助金额:
$ 43.34万 - 项目类别:
Continuing Grant
Collaborative Research: Type Qualifiers for Software Security
协作研究:软件安全的类型限定符
- 批准号:
0430118 - 财政年份:2004
- 资助金额:
$ 43.34万 - 项目类别:
Continuing Grant
相似海外基金
TC: Medium: Collaborative Research: Program Analysis for Smartphone Application Security
TC:媒介:协作研究:智能手机应用程序安全的程序分析
- 批准号:
1630037 - 财政年份:2015
- 资助金额:
$ 43.34万 - 项目类别:
Standard Grant
TC: Medium: Collaborative Research: Program Analysis for Smartphone Application Security
TC:媒介:协作研究:智能手机应用程序安全的程序分析
- 批准号:
1064646 - 财政年份:2011
- 资助金额:
$ 43.34万 - 项目类别:
Standard Grant
TC: Medium: Collaborative Research: Building Trustworthy Applications for Mobile Devices
TC:媒介:协作研究:为移动设备构建值得信赖的应用程序
- 批准号:
1064944 - 财政年份:2011
- 资助金额:
$ 43.34万 - 项目类别:
Standard Grant
TC: Medium: Collaborative Research: Securing Web Advertisements: Fixing the Short-term Crisis and Addressing Long-term Challenges
TC:媒介:协作研究:保护网络广告:解决短期危机并应对长期挑战
- 批准号:
1065216 - 财政年份:2011
- 资助金额:
$ 43.34万 - 项目类别:
Standard Grant
TC: Medium: Collaborative Research: Tracking Adversarial Behavior in Distributed Systems with Secure Networked Provenance
TC:中:协作研究:通过安全网络来源跟踪分布式系统中的对抗行为
- 批准号:
1065130 - 财政年份:2011
- 资助金额:
$ 43.34万 - 项目类别:
Standard Grant
TC: Medium: Collaborative Research: Securing Web Advertisements: Fixing the Short-term Crisis and Addressing Long-term Challenges
TC:媒介:协作研究:保护网络广告:解决短期危机并应对长期挑战
- 批准号:
1065537 - 财政年份:2011
- 资助金额:
$ 43.34万 - 项目类别:
Standard Grant
TC: Medium: Collaborative Research: Program Analysis for Smartphone Application Security
TC:媒介:协作研究:智能手机应用程序安全的程序分析
- 批准号:
1064844 - 财政年份:2011
- 资助金额:
$ 43.34万 - 项目类别:
Standard Grant
TC: Medium: Collaborative Research: Tracking Adversarial Behavior in Distributed Systems with Secure Networked Provenance
TC:中:协作研究:通过安全网络来源跟踪分布式系统中的对抗行为
- 批准号:
1064986 - 财政年份:2011
- 资助金额:
$ 43.34万 - 项目类别:
Standard Grant
TC: Medium: Collaborative Research: Building Trustworthy Applications for Mobile Devices
TC:媒介:协作研究:为移动设备构建值得信赖的应用程序
- 批准号:
1064900 - 财政年份:2011
- 资助金额:
$ 43.34万 - 项目类别:
Standard Grant
TC: Medium: Collaborative Research: Random Number Generation and Use in Virtualized Environments
TC:媒介:协作研究:虚拟化环境中的随机数生成和使用
- 批准号:
1065288 - 财政年份:2011
- 资助金额:
$ 43.34万 - 项目类别:
Standard Grant