Secloud

A cloud-based comprehensive and lightweight security solution for smartphones

Saman Zonouz, Amir Houmansadra, Robin Berthiera, Nikita Borisova, William Sanders

Research output: Contribution to journalArticle

53 Citations (Scopus)

Abstract

As smartphones are becoming more complex and powerful to provide better functionalities, concerns are increasing regarding security threats against their users. Since smart-phones use a software architecture similar to PCs, they are vulnerable to the same classes of security risks. Unfortunately, smartphones are constrained by their limited resources that prevent the integration of advanced security monitoring solutions that work with traditional PCs. We propose Secloud, a cloud-based security solution for smartphone devices. Secloud emulates a registered smartphone device inside a designated cloud and keeps it synchronized by continuously passing the device inputs and network connections to the cloud. This allows Secloud to perform a resource-intensive security analysis on the emulated replica that would otherwise be infeasible to run on the device itself. We demonstrate the practical feasibility of Secloud through a prototype for Android devices and illustrate its resource effectiveness by comparing it with on-device solutions.

Original languageEnglish
Pages (from-to)215-227
Number of pages13
JournalComputers and Security
Volume37
DOIs
StatePublished - Apr 17 2013

Fingerprint

Smartphones
resources
Software architecture
PC
functionality
Monitoring
threat
monitoring

Keywords

  • Cloud computing
  • Energy-aware security
  • Intrusion detection
  • Real-time intrusion response
  • Smartphone security

ASJC Scopus subject areas

  • Computer Science(all)
  • Law

Cite this

Secloud : A cloud-based comprehensive and lightweight security solution for smartphones. / Zonouz, Saman; Houmansadra, Amir; Berthiera, Robin; Borisova, Nikita; Sanders, William.

In: Computers and Security, Vol. 37, 17.04.2013, p. 215-227.

Research output: Contribution to journalArticle

Zonouz, S, Houmansadra, A, Berthiera, R, Borisova, N & Sanders, W 2013, 'Secloud: A cloud-based comprehensive and lightweight security solution for smartphones', Computers and Security, vol. 37, pp. 215-227. https://doi.org/10.1016/j.cose.2013.02.002
Zonouz, Saman ; Houmansadra, Amir ; Berthiera, Robin ; Borisova, Nikita ; Sanders, William. / Secloud : A cloud-based comprehensive and lightweight security solution for smartphones. In: Computers and Security. 2013 ; Vol. 37. pp. 215-227.
@article{e70323293092460490db413e9c78741e,
title = "Secloud: A cloud-based comprehensive and lightweight security solution for smartphones",
abstract = "As smartphones are becoming more complex and powerful to provide better functionalities, concerns are increasing regarding security threats against their users. Since smart-phones use a software architecture similar to PCs, they are vulnerable to the same classes of security risks. Unfortunately, smartphones are constrained by their limited resources that prevent the integration of advanced security monitoring solutions that work with traditional PCs. We propose Secloud, a cloud-based security solution for smartphone devices. Secloud emulates a registered smartphone device inside a designated cloud and keeps it synchronized by continuously passing the device inputs and network connections to the cloud. This allows Secloud to perform a resource-intensive security analysis on the emulated replica that would otherwise be infeasible to run on the device itself. We demonstrate the practical feasibility of Secloud through a prototype for Android devices and illustrate its resource effectiveness by comparing it with on-device solutions.",
keywords = "Cloud computing, Energy-aware security, Intrusion detection, Real-time intrusion response, Smartphone security",
author = "Saman Zonouz and Amir Houmansadra and Robin Berthiera and Nikita Borisova and William Sanders",
year = "2013",
month = "4",
day = "17",
doi = "10.1016/j.cose.2013.02.002",
language = "English",
volume = "37",
pages = "215--227",
journal = "Computers and Security",
issn = "0167-4048",
publisher = "Elsevier Limited",

}

TY - JOUR

T1 - Secloud

T2 - A cloud-based comprehensive and lightweight security solution for smartphones

AU - Zonouz, Saman

AU - Houmansadra, Amir

AU - Berthiera, Robin

AU - Borisova, Nikita

AU - Sanders, William

PY - 2013/4/17

Y1 - 2013/4/17

N2 - As smartphones are becoming more complex and powerful to provide better functionalities, concerns are increasing regarding security threats against their users. Since smart-phones use a software architecture similar to PCs, they are vulnerable to the same classes of security risks. Unfortunately, smartphones are constrained by their limited resources that prevent the integration of advanced security monitoring solutions that work with traditional PCs. We propose Secloud, a cloud-based security solution for smartphone devices. Secloud emulates a registered smartphone device inside a designated cloud and keeps it synchronized by continuously passing the device inputs and network connections to the cloud. This allows Secloud to perform a resource-intensive security analysis on the emulated replica that would otherwise be infeasible to run on the device itself. We demonstrate the practical feasibility of Secloud through a prototype for Android devices and illustrate its resource effectiveness by comparing it with on-device solutions.

AB - As smartphones are becoming more complex and powerful to provide better functionalities, concerns are increasing regarding security threats against their users. Since smart-phones use a software architecture similar to PCs, they are vulnerable to the same classes of security risks. Unfortunately, smartphones are constrained by their limited resources that prevent the integration of advanced security monitoring solutions that work with traditional PCs. We propose Secloud, a cloud-based security solution for smartphone devices. Secloud emulates a registered smartphone device inside a designated cloud and keeps it synchronized by continuously passing the device inputs and network connections to the cloud. This allows Secloud to perform a resource-intensive security analysis on the emulated replica that would otherwise be infeasible to run on the device itself. We demonstrate the practical feasibility of Secloud through a prototype for Android devices and illustrate its resource effectiveness by comparing it with on-device solutions.

KW - Cloud computing

KW - Energy-aware security

KW - Intrusion detection

KW - Real-time intrusion response

KW - Smartphone security

UR - http://www.scopus.com/inward/record.url?scp=84884907087&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84884907087&partnerID=8YFLogxK

U2 - 10.1016/j.cose.2013.02.002

DO - 10.1016/j.cose.2013.02.002

M3 - Article

VL - 37

SP - 215

EP - 227

JO - Computers and Security

JF - Computers and Security

SN - 0167-4048

ER -