Security objectives, controls and metrics development for an Android smartphone application

Reijo Savola; Markku Kylänpää

doi:10.1109/ISSA.2014.6950501

Security objectives, controls and metrics development for an Android smartphone application

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

1 Citation (Scopus)

Abstract

Security in Android smartphone platforms deployed in public safety and security mobile networks is a remarkable challenge. We analyse the security objectives and controls for these systems based on an industrial risk analysis. The target system of the investigation is an Android platform utilized for public safety and security mobile network. We analyse how a security decision making regarding this target system can be supported by effective and efficient security metrics. In addition, we describe implementation details of security controls for authorization and integrity objectives of a demonstration of the target system.

Original language	English
Title of host publication	Conference Proceedings
Subtitle of host publication	Information Security for South Africa 2014
Publisher	IEEE Institute of Electrical and Electronic Engineers
Number of pages	8
ISBN (Electronic)	978-1-4799-3384-6
ISBN (Print)	978-1-4799-3383-9
DOIs	https://doi.org/10.1109/ISSA.2014.6950501
Publication status	Published - 2014
MoE publication type	A4 Article in a conference publication
Event	13th International Information Security for South Africa, ISSA 2014 - Johannesburg, South Africa Duration: 13 Aug 2014 → 14 Aug 2014

Conference

Conference	13th International Information Security for South Africa, ISSA 2014
Abbreviated title	ISSA 2014
Country/Territory	South Africa
City	Johannesburg
Period	13/08/14 → 14/08/14

Keywords

Android
security objectives
security metrics
security effectiveness
risk analysis

Access to Document

10.1109/ISSA.2014.6950501

Cite this

@inproceedings{6dd591c6100d4144b5181d40b9467259,

title = "Security objectives, controls and metrics development for an Android smartphone application",

abstract = "Security in Android smartphone platforms deployed in public safety and security mobile networks is a remarkable challenge. We analyse the security objectives and controls for these systems based on an industrial risk analysis. The target system of the investigation is an Android platform utilized for public safety and security mobile network. We analyse how a security decision making regarding this target system can be supported by effective and efficient security metrics. In addition, we describe implementation details of security controls for authorization and integrity objectives of a demonstration of the target system.",

keywords = "Android, security objectives, security metrics, security effectiveness, risk analysis",

author = "Reijo Savola and Markku Kyl{\"a}np{\"a}{\"a}",

note = "Project code: 78531 ; 13th International Information Security for South Africa, ISSA 2014, ISSA 2014 ; Conference date: 13-08-2014 Through 14-08-2014",

year = "2014",

doi = "10.1109/ISSA.2014.6950501",

language = "English",

isbn = "978-1-4799-3383-9",

booktitle = "Conference Proceedings",

publisher = "IEEE Institute of Electrical and Electronic Engineers",

address = "United States",

}

Savola, R & Kylänpää, M 2014, Security objectives, controls and metrics development for an Android smartphone application. in Conference Proceedings: Information Security for South Africa 2014. IEEE Institute of Electrical and Electronic Engineers, 13th International Information Security for South Africa, ISSA 2014, Johannesburg, South Africa, 13/08/14. https://doi.org/10.1109/ISSA.2014.6950501

Security objectives, controls and metrics development for an Android smartphone application. / Savola, Reijo; Kylänpää, Markku.

Conference Proceedings: Information Security for South Africa 2014. IEEE Institute of Electrical and Electronic Engineers, 2014.

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

TY - GEN

T1 - Security objectives, controls and metrics development for an Android smartphone application

AU - Savola, Reijo

AU - Kylänpää, Markku

N1 - Project code: 78531

PY - 2014

Y1 - 2014

N2 - Security in Android smartphone platforms deployed in public safety and security mobile networks is a remarkable challenge. We analyse the security objectives and controls for these systems based on an industrial risk analysis. The target system of the investigation is an Android platform utilized for public safety and security mobile network. We analyse how a security decision making regarding this target system can be supported by effective and efficient security metrics. In addition, we describe implementation details of security controls for authorization and integrity objectives of a demonstration of the target system.

AB - Security in Android smartphone platforms deployed in public safety and security mobile networks is a remarkable challenge. We analyse the security objectives and controls for these systems based on an industrial risk analysis. The target system of the investigation is an Android platform utilized for public safety and security mobile network. We analyse how a security decision making regarding this target system can be supported by effective and efficient security metrics. In addition, we describe implementation details of security controls for authorization and integrity objectives of a demonstration of the target system.

KW - Android

KW - security objectives

KW - security metrics

KW - security effectiveness

KW - risk analysis

U2 - 10.1109/ISSA.2014.6950501

DO - 10.1109/ISSA.2014.6950501

M3 - Conference article in proceedings

SN - 978-1-4799-3383-9

BT - Conference Proceedings

PB - IEEE Institute of Electrical and Electronic Engineers

T2 - 13th International Information Security for South Africa, ISSA 2014

Y2 - 13 August 2014 through 14 August 2014

ER -

Security objectives, controls and metrics development for an Android smartphone application

Abstract

Conference

Keywords

Access to Document

Fingerprint

Cite this