A systematic approach for cell-phone worm containment

ABSTRACT

Cell phones are increasingly becoming attractive targets of various worms, which cause the leakage of user privacy, extra service charges and depletion of battery power. In this work, we study propagation of cell-phone worms, which exploit Multimedia Messaging Service (MMS) and/or Bluetooth for spreading. We then propose a systematic countermeasure against the worms. At the terminal level, we adopt Graphic Turing test and identity-based signature to block unauthorized messages from leaving compromised phones; at the network level, we propose a push-based automated patching scheme for cleansing compromised phones. Through experiments on phone devices and a wide variety of networks, we show that cellular systems taking advantage of our defense can achieve a low infection rate (e.g., less than 3% within 30 hours) even under severe attacks.

REFERENCES

• 1: http://www.f-secure.com/v-descs/flexispy_a.shtml.
• 2: http://www.f-secure.com/wireless/threats.
• 3: L. Ahn, M. Blum, N. Hopper, and J. Langford. CAPTCHA: Using Hard AI Problems for Security. In EUROCRYPT'03, 2003.
• 4: A. Barabasi and R. Albert. Emergence of scaling in random networks. In Science, pages 509--512, Oct., 1999.
• 5: Abhijit Bose , Kang G. Shin, Proactive security for mobile messaging networks, Proceedings of the 5th ACM workshop on Wireless security, September 29-29, 2006, Los Angeles, California [doi>10.1145/1161289.1161307]
• 6: Jerry Cheng , Starsky H.Y. Wong , Hao Yang , Songwu Lu, SmartSiren: virus detection and alert for smartphones, Proceedings of the 5th international conference on Mobile systems, applications and services, June 11-13, 2007, San Juan, Puerto Rico [doi>10.1145/1247660.1247690]
• 7: E. Chien. Security response: Symbos.mabir, symantec, 2005.
• 8: E. Chien. Security response: Symbos.skull, symantec, 2004.
• 9: C. Mulliner, G. Vigna, D. Dagon, and W. Lee. Using labeling to prevent cross-service attacks against smartphones. In DIMVA'06, 2006.
• 10: M. Newman, S. Forrest, and J. Balthrop. Email networks and the spread of computer viruses. In Physical Review, 2002.
• 11: Adi Shamir, Identity-based cryptosystems and signature schemes, Proceedings of CRYPTO 84 on Advances in cryptology, p.47-53, August 1985, Santa Barbara, California, United States

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Data communications

General Terms:
Algorithms, Design, Experimentation, Security

Keywords:
cell phone, patch, turing test