MRI: Acquisition of Equipment to Establish Mobile Testing Infrastructure for Bring Your Own Device Research and Education

MRI：采购设备以建立移动测试基础设施，以便自带设备进行研究和教育

• 批准号: 1337529
• 负责人: Yong Wang
• 金额: $ 16.81万
• 依托单位: Dakota State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-09-01 至 2017-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1337529&HistoricalAwards=false
• 关键词: MRI; Acquisition; Equipment; Establish; Mobile

Proposal #: 13-37529PI(s): Wang, YongInstitution: Dakota State University Title: MRI/Acq.: Equipment to Establish a Mobile Testing Infrastructure- Bring Your Own Device for Research and EducationProject Proposed:This project, studying fundamental issues in Bringing Your Own Device (BYOD) security, aims to identify better approaches to protect enterprise and campus networks. The following objectives are pursued:- Creating tools to facilitate mobile penetration testing, and - Developing a mobile early warning Intrusion Detection System (IDS) for malware utilizing network performance metrics (mobile penetration test and early warning IDS,- Developing secret sharing schemes to protect and share custody of sensitive data on BYODs (algorithms), and- Establishing secure zones using secret sharing schemes on BYODs (BYODLib).These research objectives are expected to lead to corresponding opportunities for education in cyber operations and cyber security. Moreover, two educational objectives are also sought: To- Extend laboratory assignments/class projects to support mobile security devices (extend lab assignments) and- Increase research productivity and enhance education on mobile security for undergraduate students selecting the mobile minor (strengthen research and education on mobile devices).This project extends penetration to mobile devices. The emerging mobile-penetration testing area enables identification of unknown vulnerabilities in a mobile device. Notwithstanding the challenge, protecting sensitive data on BYOD is essential to protect enterprise and campus networks. A novel scheme based on secret data could be used to protect sensitive data as well as offline data, as it is likely to allow network administrators to disabled users? access even if the data is on BYOD. The BYOD library based on a secret sharing scheme should enable mobile applications to establish secure zones on mobile devices and protect sensitive data.Broader Impacts: The instrumentation will be made available to faculty and students from other institutions in the state. The project meets the priority of South Dakota?s Relevant and Technology Plan focusing on information technology, cyber security, and information assurance. The infrastructure should increase the research productivity on mobile devices and enhance education on mobile security for both undergraduate and graduate students. The institution is one of only four schools in the nation with NSA recognition in Information Assurance Education (CAE-IASE), Research (CAE-R), and Cyber Operations (CAE-CO). The instrumentation should contribute to conduct research in BYOD security and provide new opportunities for education on cyber security and operations in an EPSCoR state.

提案编号：13- 37529 PI（s）：Wang，Yong机构：Dakota州立大学标题：MRI/采集：建立移动的测试基础设施的设备-自带设备用于研究和教育项目建议：该项目研究自带设备（BYOD）安全的基本问题，旨在确定保护企业和校园网络的更好方法。追求以下目标：-创建工具，以促进移动的渗透测试，和-开发一个移动的预警入侵检测系统（IDS）的恶意软件利用网络性能指标（移动的渗透测试和预警IDS），-开发秘密共享计划，以保护和共享保管的敏感数据的BYOD（算法），和-建立安全区使用秘密共享计划的BYOD（BYODLib）。这些研究目标预计将导致相应的机会，在网络操作和网络安全的教育。此外，还寻求两个教育目标：-扩大实验室作业/课堂项目，以支持移动的安全设备（扩大实验室作业）和-提高研究生产力，并加强对本科生的移动的安全教育选择移动辅修（加强研究和移动的设备的教育）。新兴的移动渗透测试领域能够识别移动终端中的未知漏洞。尽管面临挑战，但保护BYOD上的敏感数据对于保护企业和园区网络至关重要。一种基于秘密数据的新方案可以用来保护敏感数据和离线数据，因为它可能允许网络管理员禁用用户？即使数据位于BYOD上，也可以访问。基于秘密共享方案的BYOD库应使移动的应用程序能够在移动的设备上建立安全区域并保护敏感数据。更广泛的影响：该仪器将提供给该州其他机构的教师和学生。该项目符合南达科他州的优先级？的相关和技术计划，重点是信息技术，网络安全和信息保障。该基础设施应提高移动的设备的研究生产力，并加强本科生和研究生的移动的安全教育。该机构是全国仅有的四所在信息保障教育（CAE-IASE），研究（CAE-R）和网络运营（CAE-CO）方面获得NSA认可的学校之一。该仪器应有助于进行BYOD安全研究，并为EPSCoR状态下的网络安全和运营教育提供新的机会。

项目成果

Mobile payment security, threats, and challenges

• DOI: 10.1109/mobisecserv.2016.7440226
• 发表时间: 2016-02
• 期刊: 2016 Second International Conference on Mobile and Secure Services (MobiSecServ)
• 作者: Yong Wang;Christen Hahn;Kruttika Sutrave

Remote mobile screen (RMS): An approach for secure BYOD environments

• DOI: 10.1109/iccnc.2015.7069314
• 发表时间: 2015-03
• 期刊: 2015 International Conference on Computing, Networking and Communications (ICNC)
• 作者: Santiago Gimenez Ocano;B. Ramamurthy;Y. Wang

Mobile security testing approaches and challenges

移动安全测试方法和挑战

• DOI: 10.1109/mobisecserv.2015.7072880
• 发表时间: 2015
• 期刊: First Conference on Mobile and Secure Services (MOBISECSERV
• 作者: Wang, Yong;Alshboul, Yazan
• 通讯作者: Alshboul, Yazan

An automated virtual security testing platform for android mobile apps

适用于 Android 移动应用的自动化虚拟安全测试平台

• DOI: 10.1109/mobisecserv.2015.7072877
• 发表时间: 2015
• 期刊: First Conference on Mobile and Secure Services (MOBISECSERV
• 作者: Wang, Yong

MobileGuardian: A security policy enforcement framework for mobile devices

MobileGuardian：移动设备的安全策略实施框架

• DOI: 10.1109/cts.2014.6867564
• 发表时间: 2014
• 期刊: International Conference on Collaboration Technologies and Systems (CTS
• 作者: Wang, Yong;Vangury, Karthik;Nikolai, Jason
• 通讯作者: Nikolai, Jason