Virtualizing hardware to reduce costs and expand markets II

将经过认证的硬件解决方案替换为旨在安装在非托管设备上的应用程序是非常困难的 在各种移动云计算场景中开始出现的有趣问题(例如，允许 员工在他们的设备上安装公司软件)。开发可通信的防篡改应用程序 因此，使用云托管的后端成为移动云计算中一个非常重要的问题 太空。由于我们无法控制用户的移动设备，我们必须假设操作系统可能 用户可能(有意或无意)安装了攻击我们应用程序的应用程序。这个 因此，关键挑战是开发一款将在潜在敌意环境中运行的应用程序。在这个项目中，我们 将重点放在加密的内部通信和确保加密数据的安全存储上(例如购买 数据)和不可靠网络内的安全通信。将特别重视审计工作 小路。

Replacing a certified hardware solution with apps designed to be installed on un-managed devices is a very interesting issue that begins to appear in a variety of mobile cloud computing scenarios (e.g. allowing employees to install company software on their devices). Developing tamper proof apps that communicate with a cloud-hosted backend is therefore becoming a very important issue in the mobile cloud computing space. Since we have no control over the mobile devices of users we must assume that the OS maybe compromised and that users may have (intentionally or un-intentionally) installed apps that attack our app. The key challenge is therefore to develop an app that will run in a potentially hostile environment. In this project we will focus on encrypted internal communication and ensuring the safe storage of encrypted data (e.g. purchase data) and the safe communication within an undependable network. Special emphasis will be given to the audit trails.