TWC: Small: Secure Mobile Devices through Multiple Lines of Defense

TWC：小型：通过多道防线保护移动设备

• 批准号: 1619251
• 负责人: Yanchao Zhang
• 金额: $ 50万
• 依托单位: Arizona State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-09-01 至 2021-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1619251&HistoricalAwards=false
• 关键词: TWC; Small; Secure; Mobile; Devices

The human society is in a wireless and mobile era. People are enjoying quality life brought by mobile devices while subject to growing cyber threats. There is thus a pressing need to develop secure and usable protection mechanisms for mobile devices. This proposal outlines a challenging research plan on developing, implementing, and evaluating secure and usable countermeasures against new attacks on mobile devices. The scientific promise of the proposed research will expand the fundamental understandings about mobile device security. Successful development and implementations of the proposed techniques will have profound impact on secure mobile device usage, thus significantly improving the information security of mobile users in U.S. and around the world.The proposed research consists of four thrusts. The first thrust is to develop secure and usable defenses against video-assisted keystroke inference attacks in which an attacker can infer a user's typed inputs on the touchscreen by recording and analyzing the video of the device backside during the user's input process. The second thrust is to develop secure and usable defenses against power-assisted app inference attacks where an attacker intrudes the victim's mobile device through an infected app and then accesses the power profile of the device. The third thrust is to develop secure and usable defenses against device losses/thefts, which automatically lock a mobile device once it leaves the vicinity of its owner. The key idea of the proposed defenses is to let a mobile device automatically, quickly, and accurately recognize its physical separation from its owner by detecting and analyzing the changes in wireless signals. The last thrust is to implement and evaluate the discovered attacks and proposed defenses. The implementation and evaluation will be conducted on smartphones, tablets, laptops, and Universal Software Radio Peripheral platforms.

人类社会正处于一个无线、移动的时代。人们在享受移动设备带来的高质量生活的同时，也受到越来越多的网络威胁。因此，迫切需要为移动设备开发安全和可用的保护机制。这份提案概述了一项具有挑战性的研究计划，该计划旨在开发、实施和评估针对移动设备新攻击的安全、可用的对策。这项拟议研究的科学前景将扩大对移动设备安全的基本理解。这些技术的成功开发和实施将对移动设备的安全使用产生深远的影响，从而显著提高美国和世界各地移动用户的信息安全。第一个推力是开发针对视频辅助击键推理攻击的安全和可用的防御措施，即攻击者可以通过在用户输入过程中记录和分析设备背面的视频来推断用户在触摸屏上键入的输入。第二个推力是开发安全和可用的防御措施，以抵御电力辅助应用程序推理攻击，即攻击者通过受感染的应用程序入侵受害者的移动设备，然后访问设备的电源配置文件。第三个推动力是开发安全和可用的设备丢失/被盗防御系统，一旦移动设备离开所有者附近，它就会自动锁定设备。提议的防御措施的关键思想是通过检测和分析无线信号的变化，让移动设备自动、快速和准确地识别其与所有者的物理隔离。最后一个重点是实施和评估发现的攻击和提出的防御措施。实施和评估将在智能手机、平板电脑、笔记本电脑和通用软件无线电外围平台上进行。

项目成果

IndoorWaze: A Crowdsourcing-Based Context-Aware Indoor Navigation System

• DOI: 10.1109/twc.2020.2993545
• 发表时间: 2020-05
• 期刊: IEEE Transactions on Wireless Communications
• 影响因子: 10.4
• 作者: Tao Li;Dianqi Han;Yimin Chen;Rui Zhang;Yanchao Zhang;Terri Hedgpeth

KV-Fresh: Freshness Authentication for Outsourced Multi-Version Key-Value Stores

KV-Fresh：外包多版本键值存储的新鲜度认证

• DOI: 10.1109/infocom41043.2020.9155270
• 发表时间: 2020
• 期刊: IEEE International Conference on Computer Communications (INFOCOM
• 作者: Hu, Yidan;Zhang, Rui;Zhang, Yanchao
• 通讯作者: Zhang, Yanchao