CAREER: Protecting User Data on Lost, Stolen and Damaged Mobile Phones

随着移动电话越来越能够执行日益复杂和敏感的任务，此类设备的丢失、被盗或销毁是最重要的安全问题之一。这项研究通过打破手机和硬件之间的强制绑定，提高了这些设备上存储和生成的数据的安全性。特别是，这项工作将与这类漏洞相关的损害限制在设备本身的成本上，而不是它们传输的数据的价值。在该系统中，移动电话用户可以将其手机的软件镜像无缝地迁移到他们可以支配的任何设备上，而存在于以前使用的设备上的数据被自动加密或安全删除。手机图像本身被高效地推送到云中和从云中拉出，云还支持通过空中和云本身对手机图像进行修补和升级，从而提高了缓解软件漏洞的速度。通过这种方式，网络提供商和用户可以对安全事件采取高度动态的响应。

As mobile phones become capable of performing increasingly complex and sensitive tasks, the loss, theft or destruction of such devices represents one of the most significant classes of security problems. This research improves the security of data stored on and generated by these devices by breaking the mandatory binding between mobile phones and hardware. In particular, this work limits the damage associated with this class of vulnerabilities not to the value of the data they transport but to the cost of the device itself. In this system, mobile phone users can seamlessly migrate software images of their phone to any device at their disposal, while data present on previously used devices is automatically encrypted or securely deleted. Phone images themselves are efficiently pushed into and pulled from the cloud, which also supports patching and the upgrade of phone images to occur both over the air and within the cloud itself, increasing the speed with which software vulnerabilities can be mitigated. In so doing, this approach allows network providers and users to adopt highly dynamic responses to security incidents.