TWC: Small: Discovering and Restricting Undesirable Information Flows Between Multiple Spheres of Activities

通过移动设备上的应用程序丢失个人数据或泄露公司数据对用户构成重大风险。它可能会带来巨大的个人和经济成本。这项工作是设计新的新技术，以帮助减少使用单一设备进行多个活动领域的最终用户的风险。当单个设备用于多个活动领域时，如何确保安全是一项主要的研究挑战，目前难以控制的各种子系统之间的不可预见的信息流。该项目正在开发机制，以更好地管理移动设备上应用程序之间的流动，以便用户能够划分不同的活动领域，例如工作和个人使用。更广泛的影响：这项研究既有利于关注移动设备上数据隐私的终端用户，也有利于希望使用移动设备提高运营效率但又担心由此带来的安全风险的企业。研究生和本科生接受移动设备信息安全和隐私方面的培训。

Loss of personal data or leakage of corporate data via apps on mobile devices poses a significant risk to users. It can have both a huge personal and financial cost. This work is designing new novel techniques to help reduce the risks for end-users who use a single device for multiple spheres of activity. Getting security right when a single device is used for multiple spheres of activity is a major research challenge, with unforeseen information flows between various subsystems that are currently difficult to control. This project is developing mechanisms to better manage flows between apps on a mobile device so that users are able to compartmentalize different spheres of activity, such as work and personal use.Broader impact: This research benefits both end-users who are concerned about the privacy of their data on mobile devices as well as businesses who wish to permit use of mobile devices for improving efficiency of their operations but are concerned about resulting security risks. Graduate and undergraduate students are trained in the area of security and privacy of information on mobile devices.