TY - GEN
T1 - Secure containers in android
T2 - 6th Annual ACM CCS Workshop on Security and Privacy in Smartphones and Mobile Devices, SPSM 2016
AU - Kanonov, Uri
AU - Wool, Avishai
N1 - Publisher Copyright: © 2016 ACM.
PY - 2016/10/24
Y1 - 2016/10/24
N2 - Bring Your Own Device (BYOD) is a growing trend among enterprises, aiming to improve workers' mobility and pro- ductivity via their smartphones. The threats and dangers posed by the smartphones to the enterprise are also ever- growing. Such dangers can be mitigated by running the enterprise software inside a "secure container" on the smart- phone. In our work we present a systematic assessment of security critical areas in design and implementation of a se- cure container for Android using reverse engineering and attacker-inspired methods. We do this through a case-study of Samsung KNOX, a real-world product deployed on mil- lions of devices. Our research shows how KNOX security features work behind the scenes and lets us compare the vendor's public security claims against reality. Along the way we identified several design weaknesses and a few vul- nerabilities that were disclosed to Samsung.
AB - Bring Your Own Device (BYOD) is a growing trend among enterprises, aiming to improve workers' mobility and pro- ductivity via their smartphones. The threats and dangers posed by the smartphones to the enterprise are also ever- growing. Such dangers can be mitigated by running the enterprise software inside a "secure container" on the smart- phone. In our work we present a systematic assessment of security critical areas in design and implementation of a se- cure container for Android using reverse engineering and attacker-inspired methods. We do this through a case-study of Samsung KNOX, a real-world product deployed on mil- lions of devices. Our research shows how KNOX security features work behind the scenes and lets us compare the vendor's public security claims against reality. Along the way we identified several design weaknesses and a few vul- nerabilities that were disclosed to Samsung.
UR - https://www.scopus.com/pages/publications/84998910314
U2 - 10.1145/2994459.2994470
DO - 10.1145/2994459.2994470
M3 - Conference contribution
T3 - SPSM 2016 - Proceedings of the 6th Workshop on Security and Privacy in Smartphones and Mobile Devices, co-located with CCS 2016
SP - 3
EP - 12
BT - SPSM 2016 - Proceedings of the 6th Workshop on Security and Privacy in Smartphones and Mobile Devices, co-located with CCS 2016
Y2 - 24 October 2016
ER -