Addressing Security and Privacy Concerns in Mobile Device Environments

点击翻译按钮获取中文摘要

The world in which we live is becoming increasingly interconnected: more and more devices have access to some sort of network and are therefore accessible by myriad other devices across the planet. Such connectivity can bring convenience, productivity, and interesting new applications to users, but can also lead to a host of problems, not the least of which is heightened security and privacy risks.*********Objectives of the Proposed Research Program******This research will analyze and address security/privacy concerns in current and emerging environments including cloud, e-health, e-travel, and high-security networks, particularly with a focus on their interaction with, and dependence upon, mobile devices. We will build on and extend our work over the past few years in order to continue finding novel techniques to mitigate threats to user security and privacy in these environments.******The primary objective of this proposed research program is thus two-fold. First, we will examine a number of current and emerging environments to assess the security and/or privacy vulnerabilities that exist. Of recent and particular interest are (1) data location assurance in cloud storage environments, (2) patient data aggregation and analysis in e-health networks, (3) border control in e-travel applications, and (4) data exfiltration from high-security air-gapped computers.******Second, we will find solutions in these environments that allow the required functionality while protecting user privacy and enhancing the security of the devices and networks in use. The common thread in all the scenarios we are examining is the use of mobile devices for sending, receiving, or manipulating sensitive data. The research challenge, therefore, is to find solutions that achieve a balance of efficiency, usability, and correct operation in these small personal devices; building on some of our recent results gives confidence that this can be done.*** ***Scientific Approach***This research will involve significant design and development of algorithms, protocols, and applications for security and privacy, extending current technologies such as identity-based encryption, homomorphic encryption, mobile device protection mechanisms, and credential systems. Development tools and testing environments will be created to facilitate this work. In addition, multiple devices will be interconnected in a laboratory environment to properly simulate and test the information sharing and distributed processing models upon which the security and privacy infrastructures will be built.*** ***Novelty and Expected Significance of the Work***The research completed within the scope of this proposal will influence the direction and implementation of mobile security and privacy technologies in the next few years, helping to put Canada even more at the forefront of online technology development internationally.**