EAGER: Mobile Application Security through Remote Sandboxing and Cloud Computing

过去几年见证了个人移动设备（如智能手机和平板电脑）数量的爆炸式增长。在这一增长之后，移动应用程序的下载量以及相关的安全威胁也出现了更为惊人的增长。在这种情况下，可以利用云计算范式来提高移动应用程序的安全性。其基本思想是将移动应用程序安装在云基础设施中的远程服务器上，而不是安装在设备上。然后可以使用类似于远程桌面计算的技术访问应用程序。这种方法被称为远程沙箱。该方案的主要优点是非常适合于高效地提供高级安全特性。为此，远程沙箱与为移动应用程序量身定制的基于云的安全服务框架相辅相成。该框架支持异构移动设备和平台，并提供了提高云基础设施资源利用率的方法。此外，它还为移动设备的远程组网提供了节能可靠的支持。远程沙箱框架将启用一种新的云交付模型，在这种模型中，向用户提供针对移动应用程序的安全服务。它还将通过提高资源分配和管理效率，以及促进安全研究，使云计算受益。最后，该研究将促进对影响个人设备的安全威胁和隐私问题的认识，并包括针对本科生和K-12学生的活动。

The last few years have witnessed an explosive growth in the number of personal mobile devices, such as smartphones and tablets. This growth has been followed by an even more exceptional increase in the download of mobile applications, as well as in the related security threats. In this context, the cloud computing paradigm can be leveraged to improve mobile application security. The fundamental idea is to install the mobile application on a remote server in the cloud infrastructure rather than on the device. Then the application can be accessed with techniques similar to remote desktop computing. This approach is referred to as remote sandboxing.The major advantage of this scheme is that it is very suitable to efficiently offer advanced security features. To this end, remote sandboxing is complemented with a framework for cloud-based security services tailored to mobile applications. The framework supports heterogeneous mobile devices and platforms, and provides methods to improve the resource utilization of the cloud infrastructure. Furthermore, it provides energy-efficient and reliable support for remote networking of mobile devices.The remote sandboxing framework will enable a new cloud delivery model, where security services specific to mobile applications are offered to the users. It will also benefit cloud computing by improving efficiency in resource allocation and management, as well as by fostering research on security. Finally, the research will promote the awareness of security threats and privacy issues affecting personal devices, and include activities targeted to undergraduate and K-12 students.