NDLI: Counterfeit mobile devices

Content Provider	IEEE Xplore Digital Library
Author	O’brien, J. Lehtonen, K.
Copyright Year	2015
Abstract	A well-known proverb says “If it looks like a duck, walks like a duck and quacks like a duck, it is a duck”. This statement raises an interesting approach to identifying counterfeit mobile devices. If we substitute the “duck” for a device and map the proverb to the following characteristics of a device, we can use the proverb to help validate if a device is counterfeit: 1) Looks like a duck: user interface 2) Walks like a duck: safety, compliance and physical testing 3) Quacks like a duck: OS and pre-installed applications This paper looks at how these characteristics can identify a counterfeit device. The paper starts by identifying these characteristics, and then determining how and where counterfeit devices deviate in their representation of the characteristics from the legitimate norm, as identified by official device and software manufacturers. The paper also explores the risks associated with purchasing counterfeit or substandard mobile devices, suppositions on why and how those risks are exploited by illegitimate device manufacturers, and mitigations on reducing or removing the availability of illegitimate devices. In particular, this paper will: Provide background information on the sourcing of the counterfeit and substandard devices. Discuss the software extraction technologies used as well as the malware scanning and analysis tests performed. Discuss the tests performed by the Microsoft Mobile Operations Product Safety team on the devices’ hardware. Analyze and report on the results of the testing performed; specifically the risks posed to end users by these devices. Finish with a discussion of some mitigations and steps that could be taken to minimize the risks counterfeit phones pose to end users.
Starting Page	144
Ending Page	151
File Size	931018
Page Count	8
File Format	PDF
ISBN	9781509003174
e-ISBN	9781509003198
DOI	10.1109/MALWARE.2015.7413695
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2015-10-20
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Performance evaluation Mobile communication Malware Hardware Mobile handsets Safety Testing
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Mobile device penetration testing framework and platform for the mobile device security course

Tamper-resistant database logging on mobile devices

User experience evaluation methods for mobile devices

A mapreduce framework for heterogeneous mobile devices

Malware Detection for Mobile Devices Using Software-Defined Networking

Testing of biometric systems integrated in mobile devices

Mobile security technology for smart devices

Malware Detection on Mobile Devices Using Distributed Machine Learning

Behavior-Based Malware Detection on Mobile Phone

Counterfeit mobile devices - the duck test

Similar Documents

Mobile device penetration testing framework and platform for the mobile device security course

Tamper-resistant database logging on mobile devices

User experience evaluation methods for mobile devices

A mapreduce framework for heterogeneous mobile devices

Malware Detection for Mobile Devices Using Software-Defined Networking

Testing of biometric systems integrated in mobile devices

Mobile security technology for smart devices

Malware Detection on Mobile Devices Using Distributed Machine Learning

Behavior-Based Malware Detection on Mobile Phone

Counterfeit mobile devices - the duck test