Mobile App Collusions and Its Cyber Security Implications

Arabo, Abdullahi

Abstract

© 2016 IEEE. The key focus in securing mobile software systems is substantiality intended in detecting and mitigating vulnerabilities in a single app or apps developed by the same individual. It fails to identify vulnerabilities that arise as a result of interaction or the colluding of multiple apps either from the same or different vendors. The current state-of-the-art also fails to contextualize this in reference to its impact on security and cyber security issues. This paper proposes a solution that makes use of both static and dynamic analysis, to detect and notify device users of such a vulnerability and equips the user with knowledge on inter-app interaction, the misuse of Personal Identifiable Information (PII) and the sharing of other sensitive information without their consent.

• Presentation Conference Type: Conference Paper (published)
• Conference Name: Proceedings - 3rd IEEE International Conference on Cyber Security and Cloud Computing, CSCloud 2016 and 2nd IEEE International Conference of Scalable and Smart Cloud, SSC 2016
• Start Date: Jun 24, 2016
• End Date: Jun 27, 2016
• Acceptance Date: Apr 15, 2016
• Publication Date: Aug 16, 2016
• Deposit Date: Apr 21, 2016
• Publicly Available Date: Sep 8, 2016
• Peer Reviewed: Peer Reviewed
• Pages: 178-183
• Book Title: 2016 IEEE 3rd International Conference on Cyber Security and Cloud Computing (CSCloud)
• ISBN: 9781509009466
• DOI: https://doi.org/10.1109/CSCloud.2016.9
• Keywords: app security, mobile device, app collusion, cybersecurity, Personal Identifiable Information (PII)
• Public URL: https://uwe-repository.worktribe.com/output/916498
• Publisher URL: http://dx.doi.org/10.1109/CSCloud.2016.9
• Additional Information: Additional Information : © 2016 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.; Title of Conference or Conference Proceedings : CSCloud 2016: The 3rd IEEE International Conference on Cyber Security and Cloud Computing
• Contract Date: Apr 21, 2016