invited-talk

Faux disk encryption: realities of secure storage on mobile devices

Authors:

Drew Suarez,

Daniel MayerAuthors Info & Claims

MOBILESoft '16: Proceedings of the International Conference on Mobile Software Engineering and Systems

Pages 283 - 284

https://doi.org/10.1145/2897073.2897711

Published: 14 May 2016 Publication History

Get Access

Abstract

This paper reviews the challenges faced when securing data on mobile devices. After a discussion of the state-of-the-art of secure storage for iOS and Android, the paper introduces an attack which demonstrates how Full Disk Encryption (FDE) on Android can be ineffective in practice.

References

[1]

Flurry Analytics. http://flurry.com, July 2015.

Google Scholar

[2]

Apple Inc. iOS Security - iOS 8.3 or later, April 2015.

Google Scholar

[3]

Apple Inc. Keychain Services Reference, 2015.

Google Scholar

[4]

Google. Android - Encryption. https://source.android.com/devices/tech/security/encryption/, July 2015.

Google Scholar

[5]

Mixpanel. Mobile Device Statistics, July 2015.

Google Scholar

[6]

C. Reports. Smart phone thefts rose to 3.1 million last year, Consumer Reports finds, May 2014.

Google Scholar

[7]

D. Suarez and D. Mayer. Faux Disk Encryption: Realities of Secure Storage on Mobile Devices. In BlackHat USA, 2015. http://cysec.org/downloads/paper/bhusa2015.pdf.

Google Scholar

Cited By

View all

Saeed SMohamed MFarouk Mohamed M(2021)Secure Storage of Data on Devices-Android based2021 International Conference on Software Engineering & Computer Systems and 4th International Conference on Computational Science and Information Management (ICSECS-ICOCSIM)10.1109/ICSECS52883.2021.00084(427-432)Online publication date: Aug-2021
https://doi.org/10.1109/ICSECS52883.2021.00084
FanJiao MJiamin ZXiao YChangyou ZYu-An T(2017)A High Efficiency Encryption Scheme of Dual Data Partitions for Android Devices22017 IEEE International Conference on Computational Science and Engineering (CSE) and IEEE International Conference on Embedded and Ubiquitous Computing (EUC)10.1109/CSE-EUC.2017.164(823-828)Online publication date: Jul-2017
https://doi.org/10.1109/CSE-EUC.2017.164

Recommendations

Public-Key encryption from ID-Based encryption without one-time signature
OTM'06: Proceedings of the 2006 international conference on On the Move to Meaningful Internet Systems: AWeSOMe, CAMS, COMINF, IS, KSinBIT, MIOS-CIAO, MONET - Volume Part I

Design a secure public key encryption scheme and its security proof are one of the main interests in cryptography In 2004, Canetti, Halevi and Katz [8] constructed a public key encryption (PKE) from a selective identity-based encryption scheme with a ...
Multi-use unidirectional identity-based proxy re-encryption from hierarchical identity-based encryption

At ACNS 2007, Ateniese and Green proposed the concept of ID-based proxy re-encryption (IBPRE), where a semi-trusted proxy with some information (a.k.a. re-encryption key), can transform a ciphertext under an identity to another ciphertext under another ...
Certificateless Proxy Re-Encryption Without Pairing: Revisited
SCC '15: Proceedings of the 3rd International Workshop on Security in Cloud Computing

Proxy Re-Encryption was introduced by Blaze, Bleumer and Strauss to efficiently solve the problem of delegation of decryption rights. In proxy re-encryption, a semi-honest proxy transforms a ciphertext intended for Alice to a ciphertext of the same ...

Comments

Information & Contributors

Information

Published In

MOBILESoft '16: Proceedings of the International Conference on Mobile Software Engineering and Systems

May 2016

326 pages

ISBN:9781450341783

DOI:10.1145/2897073

Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the Owner/Author.

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 14 May 2016

Check for updates

Qualifiers

Invited-talk

Conference

ICSE '16

Sponsor:

ACM
SIGSOFT
IEEE-CS\DATC
TCSE

ICSE '16: 38th International Conference on Software Engineering

May 14 - 22, 2016

Texas, Austin

Upcoming Conference

ICSE 2025

2025 IEEE/ACM 46th International Conference on Software Engineering

April 26 - May 3, 2025

Ottawa , ON , Canada

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

2
Total Citations
View Citations
135
Total Downloads

Downloads (Last 12 months)8
Downloads (Last 6 weeks)0

Reflects downloads up to 01 Mar 2025

Other Metrics

View Author Metrics

Citations

Cited By

View all

Saeed SMohamed MFarouk Mohamed M(2021)Secure Storage of Data on Devices-Android based2021 International Conference on Software Engineering & Computer Systems and 4th International Conference on Computational Science and Information Management (ICSECS-ICOCSIM)10.1109/ICSECS52883.2021.00084(427-432)Online publication date: Aug-2021
https://doi.org/10.1109/ICSECS52883.2021.00084
FanJiao MJiamin ZXiao YChangyou ZYu-An T(2017)A High Efficiency Encryption Scheme of Dual Data Partitions for Android Devices22017 IEEE International Conference on Computational Science and Engineering (CSE) and IEEE International Conference on Embedded and Ubiquitous Computing (EUC)10.1109/CSE-EUC.2017.164(823-828)Online publication date: Jul-2017
https://doi.org/10.1109/CSE-EUC.2017.164

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

Abstract

References

Cited By

Recommendations

Public-Key encryption from ID-Based encryption without one-time signature

Multi-use unidirectional identity-based proxy re-encryption from hierarchical identity-based encryption

Certificateless Proxy Re-Encryption Without Pairing: Revisited

Comments

Information

Published In

Sponsors

Publisher

Publication History

Check for updates

Qualifiers

Conference

Upcoming Conference

Contributors

Other Metrics

Bibliometrics

Article Metrics

Other Metrics

Citations

Cited By

Login options

Full Access

View options

PDF

eReader

Share

Share this Publication link

Share on social media

Affiliations