MRI: Acquisition of Equipment to Establish Mobile Testing Infrastructure for Bring Your Own Device Research and Education

MRI：采购设备以建立移动测试基础设施，以便自带设备进行研究和教育

• 批准号: 1337529
• 负责人: Yong Wang
• 金额: $ 16.81万
• 依托单位: Dakota State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2013
• 资助国家: 美国
• 起止时间: 2013-09-01 至 2017-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1337529&HistoricalAwards=false
• 关键词: MRI; Acquisition; Equipment; Establish; Mobile

Proposal #: 13-37529PI(s): Wang, YongInstitution: Dakota State University Title: MRI/Acq.: Equipment to Establish a Mobile Testing Infrastructure- Bring Your Own Device for Research and EducationProject Proposed:This project, studying fundamental issues in Bringing Your Own Device (BYOD) security, aims to identify better approaches to protect enterprise and campus networks. The following objectives are pursued:- Creating tools to facilitate mobile penetration testing, and - Developing a mobile early warning Intrusion Detection System (IDS) for malware utilizing network performance metrics (mobile penetration test and early warning IDS,- Developing secret sharing schemes to protect and share custody of sensitive data on BYODs (algorithms), and- Establishing secure zones using secret sharing schemes on BYODs (BYODLib).These research objectives are expected to lead to corresponding opportunities for education in cyber operations and cyber security. Moreover, two educational objectives are also sought: To- Extend laboratory assignments/class projects to support mobile security devices (extend lab assignments) and- Increase research productivity and enhance education on mobile security for undergraduate students selecting the mobile minor (strengthen research and education on mobile devices).This project extends penetration to mobile devices. The emerging mobile-penetration testing area enables identification of unknown vulnerabilities in a mobile device. Notwithstanding the challenge, protecting sensitive data on BYOD is essential to protect enterprise and campus networks. A novel scheme based on secret data could be used to protect sensitive data as well as offline data, as it is likely to allow network administrators to disabled users? access even if the data is on BYOD. The BYOD library based on a secret sharing scheme should enable mobile applications to establish secure zones on mobile devices and protect sensitive data.Broader Impacts: The instrumentation will be made available to faculty and students from other institutions in the state. The project meets the priority of South Dakota?s Relevant and Technology Plan focusing on information technology, cyber security, and information assurance. The infrastructure should increase the research productivity on mobile devices and enhance education on mobile security for both undergraduate and graduate students. The institution is one of only four schools in the nation with NSA recognition in Information Assurance Education (CAE-IASE), Research (CAE-R), and Cyber Operations (CAE-CO). The instrumentation should contribute to conduct research in BYOD security and provide new opportunities for education on cyber security and operations in an EPSCoR state.

Proposal #: 13-37529PI(s): Wang, YongInstitution: Dakota State University Title: MRI/Acq.: Equipment to Establish a Mobile Testing Infrastructure- Bring Your Own Device for Research and EducationProject Proposed:This project, studying fundamental issues in Bringing Your Own Device (BYOD) security, aims to identify better approaches to protect enterprise and campus networks. The following objectives are pursued:- Creating tools to facilitate mobile penetration testing, and - Developing a mobile early warning Intrusion Detection System (IDS) for malware utilizing network performance metrics (mobile penetration test and early warning IDS,- Developing secret sharing schemes to protect and share custody of sensitive data on BYODs (algorithms), and- Establishing secure zones using secret sharing schemes on BYODs (BYODLib).These预计研究目标将带来相应的网络运营和网络安全的机会，还寻求两个教育目标：扩展实验室任务/课程项目，以支持移动安全设备（扩展实验室分配），并增强对移动验证的移动式探索者的移动安全性。在移动设备中识别未知的漏洞。敏感的数据：该仪器将向该州的其他机构提供仪器，符合南达科他州的相关和技术计划的优先级。信息保证教育（CAE-IASE），研究（CAE-R）和网络运营（CAE-CO）的认可。

项目成果

Mobile payment security, threats, and challenges

• DOI: 10.1109/mobisecserv.2016.7440226
• 发表时间: 2016-02
• 期刊: 2016 Second International Conference on Mobile and Secure Services (MobiSecServ)
• 作者: Yong Wang;Christen Hahn;Kruttika Sutrave

Remote mobile screen (RMS): An approach for secure BYOD environments

• DOI: 10.1109/iccnc.2015.7069314
• 发表时间: 2015-03
• 期刊: 2015 International Conference on Computing, Networking and Communications (ICNC)
• 作者: Santiago Gimenez Ocano;B. Ramamurthy;Y. Wang

Mobile security testing approaches and challenges

移动安全测试方法和挑战

• DOI: 10.1109/mobisecserv.2015.7072880
• 发表时间: 2015
• 期刊: First Conference on Mobile and Secure Services (MOBISECSERV
• 作者: Wang, Yong;Alshboul, Yazan
• 通讯作者: Alshboul, Yazan

MobileGuardian: A security policy enforcement framework for mobile devices

MobileGuardian：移动设备的安全策略实施框架

• DOI: 10.1109/cts.2014.6867564
• 发表时间: 2014
• 期刊: International Conference on Collaboration Technologies and Systems (CTS
• 作者: Wang, Yong;Vangury, Karthik;Nikolai, Jason
• 通讯作者: Nikolai, Jason

An automated virtual security testing platform for android mobile apps

适用于 Android 移动应用的自动化虚拟安全测试平台

• DOI: 10.1109/mobisecserv.2015.7072877
• 发表时间: 2015
• 期刊: First Conference on Mobile and Secure Services (MOBISECSERV
• 作者: Wang, Yong