NDLI: TinMan: eliminating confidential mobile data exposure with security oriented offloading

Please wait, while we are loading the content...

PowerLyra: differentiated graph computation and partitioning on skewed graphs

An in-memory object caching framework with adaptive load balancing

Visigoth fault tolerance

Deriving and comparing deduplication techniques using a model-based classification

Process-level power estimation in VM-based systems

Large-scale cluster management at Google with Borg

NBA (network balancing act): a high-performance packet processing framework for heterogeneous processors

Maxoid: transparently confining mobile applications with custom views of state

Popcorn: bridging the programmability gap in heterogeneous-ISA platforms

Musketeer: all for one, one for all in data processing systems

GD-Wheel: a cost-aware replacement policy for key-value stores

Taming uncertainty in distributed systems with help from the network

An efficient page-level FTL to optimize address translation in flash memory

Application-assisted live migration of virtual machines with Java applications

ConfValley: a systematic configuration validation framework for cloud services

In-Net: in-network processing for the masses

TinMan: eliminating confidential mobile data exposure with security oriented offloading

Hare: a file system for non-cache-coherent multicores

MALT: distributed data-parallelism for existing ML applications

Putting consistency back into eventual consistency

Extensible distributed coordination

Guardat: enforcing data policies at the storage layer

SpotCheck: designing a derivative IaaS cloud on the spot market

Guaranteeing deadlines for inter-datacenter transfers

Flux: multi-surface computing in Android

Verifiable differential privacy

High-performance determinism with total store order consistency

Simba: tunable end-to-end data consistency for mobile apps

CYRUS: towards client-defined cloud storage

Synapse: a microservices architecture for heterogeneous-database web applications

μPnP: plug and play peripherals for the internet of things

Scaling concurrent log-structured data stores

TinMan: eliminating confidential mobile data exposure with security oriented offloading

Content Provider	ACM Digital Library
Author	Chen, Haibo Liu, Yutao Tan, Cheng Zang, Binyu Xia, Yubin Guan, Haibing Ma, Mingyang
Abstract	The wide adoption of smart devices has stimulated a fast shift of security-critical data from desktop to mobile devices. However, recurrent device theft and loss expose mobile devices to various security threats and even physical attacks. This paper presents TinMan, a system that protects confidential data such as web site password and credit card number (we use the term cor to represent these data, which is short for Confidential Record) from being leaked or abused even under device theft. TinMan separates accesses of cor from the rest of the functionalities of an app, by introducing a trusted node to store cor and offloading any code from a mobile device to the trusted node to access cor. This completely eliminates the exposure of cor on the mobile devices. The key challenges to TinMan include deciding when and how to efficiently and transparently offload execution; TinMan addresses these challenges with security-oriented offloading with a low-overhead tainting scheme called asymmetric tainting to track accesses to cor to trigger offloading, as well as transparent SSL session injection and TCP pay-load replacement to offload accesses to cor. We have implemented a prototype of TinMan based on Android and demonstrated how TinMan protects the information of user's bank account and credit card number without modifying the apps. Evaluation results also show that TinMan incurs only a small amount of performance and power overhead.
Starting Page	1
Ending Page	16
Page Count	16
File Format	PDF MP4
ISBN	9781450332385
DOI	10.1145/2741948.2741977
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2015-04-17
Publisher Place	New York
Access Restriction	Subscribed
Content Type	Audio Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Accelerating Mobile Audio Sensing Algorithms through On-Chip GPU Offloading

Enhancing mobile data offloading with mobility prediction and prefetching

Secure policy-based device-to-device offloading for mobile applications

Enhancing Mobile Data Offloading with Mobility Prediction and Prefetching

Deep Learning Enabled Data Offloading With Cyber Attack Detection Model in Mobile Edge Computing Systems

Security model for the protection of sensitive and confidential data on mobile devices

Vulnerability evaluation for securely offloading mobile apps in the cloud

WiFi access point deployment for efficient mobile data offloading

Multiple mobile data offloading through delay tolerant networks

TinMan: eliminating confidential mobile data exposure with security oriented offloading

Similar Documents

Accelerating Mobile Audio Sensing Algorithms through On-Chip GPU Offloading

Enhancing mobile data offloading with mobility prediction and prefetching

Secure policy-based device-to-device offloading for mobile applications

Enhancing Mobile Data Offloading with Mobility Prediction and Prefetching

Deep Learning Enabled Data Offloading With Cyber Attack Detection Model in Mobile Edge Computing Systems

Security model for the protection of sensitive and confidential data on mobile devices

Vulnerability evaluation for securely offloading mobile apps in the cloud

WiFi access point deployment for efficient mobile data offloading

Multiple mobile data offloading through delay tolerant networks

TinMan: eliminating confidential mobile data exposure with security oriented offloading