SecureDom: secure mobile-sensitive information protection with domain separation

The virtualization techniques are receiving more attention lately in mobile device security. In this study, we present SecureDom which is the device security of data-centric that aims to protect private, enterprise or sensitive data from various attacks and threats. To achieve it, we provide the mob...

Full description

Saved in:
Bibliographic Details
Published inThe Journal of supercomputing Vol. 72; no. 7; pp. 2682 - 2702
Main Authors Park, Su-Wan, Kim, JeongNyeo, Lee, Deok Gyu
Format Journal Article
LanguageEnglish
Published New York Springer US 01.07.2016
Subjects
Compilers
Computer Science
Interpreters
Processor Architectures
Programming Languages
Mobile virtualization
Domain separation
Secure mobile platform
Secure storage
Online AccessGet full text

Cover

More Information
Summary:The virtualization techniques are receiving more attention lately in mobile device security. In this study, we present SecureDom which is the device security of data-centric that aims to protect private, enterprise or sensitive data from various attacks and threats. To achieve it, we provide the mobile device security platform based on domain separation and suggests three essential secure functions which should be offered for secure domain: authentication/access control (AAC) module, secure storage (STR) module and encryption/key management (EKM) module. In secure functions, the AAC module applies two-factor authentication by user and app to access SD, the STR module introduces the enhanced abilities of secure filesystem and EKM module is in charge of security algorithms for data encryption, integrity validation or key generation. Here, EKM module can utilize the existing encryption module that is certified by cryptographic validation program. In the experiment, it demonstrates that some notable overheads are caused in the performance of virtualization engine and inter-domain communication (IDC) performance based on hypervisor, while it provides the strong isolation in domain, IDC, filesystem and resource and the separation of processes.
ISSN:0920-8542
1573-0484
DOI:10.1007/s11227-015-1578-6