1,a) 1,b) Warning system to encourage mearsure action to Android malware

Μέγεθος: px

Εμφάνιση ξεκινά από τη σελίδα:

Download "1,a) 1,b) Warning system to encourage mearsure action to Android malware"

Ῥεβέκκα Βέργας
5 χρόνια πριν
Προβολές:

1 Android 1,a) 1,b) Android Android Warning system to encourage mearsure action to Android malware Takahashi Motoka 1,a) Takada Tetsuji 1,b) Abstract: A malware application for an Android terminal has been released in the Internet and an application market. A threat caused from malware applications becomes non-negligible issue. A prior measure against the malware applications is an Anti-Virus software and the software notifies users of a malware infection to their terminals by a dialog interface. However, the dialogs in commercial Anti-Virus software products did not play a role of a risk notification and are simply ignored by mobile phone users. This is a serious issue for mobile phone security. Therefore, we propose an alternative customized malware notification dialog for both leading users a better counter action to malware and inducing users to understand a security threat from a dialog information. We also conducted a user evaluation study for measuring an effectiveness of the proposed dialogs. Keywords: Malware, Android, Security Warning, Interface Design, Security Dialog, Threat recognition, Mobile phone, Mobile Security 1. Android OS Alcatel-Lucent MALWARE REPORT - Q The University of Electro-Communications, Tokyo, Japan a) m.takahashi@uec.ac.jp b) zetaka@computer.org [1] Android OS Web Android c 2015 Information Processing Society of Japan 1

1 Android Android Android [2][4] 2 2 [3] 1 Android OS [2] 2.

2 Web OS Apple ios ios Android OS OS Trend Micro Mobile Security[2] Android OS 1 Android OS 17 Trend Micro Mobile Security Android Android Android [2][4] 2 2 [3] 1 Android OS [2] 2.2 Android version Android Google Play 3 Kelley [5] Kelley [6] 4 c 2015 Information Processing Society of Japan 2

3 28% Harbach [7] Google Play 23.7% 3 Google Play 4 Kelley 5 Harbach 2.3 Balebako Privacy Leaks just-in-time(jit)[8] JIT JIT Android [9] c 2015 Information Processing Society of Japan 3

4 Recommend Dialog Delete Dialog Invert Dialog Clear Dialog Question Dialog 6 Recommend Dialog Delete Dialog 7 Invert Dialog Clear Dialog Question Dialog 6(a)7(a) Android OS 4.1 Recommend Dialog 6(b) Recommend Dialog Delete Dialog 6(c) Delete Dialog Android OS 4.2 Invert Dialog 7(d) Invert Dialog JIS [11] [9] Clear Dialog 7(e) Clear Dialog Clear Dialog Question Dialog 7(f) Question Dialog 5. Android Recommend Dialog Delete Dialog c 2015 Information Processing Society of Japan 4

6 7 5.1.1 ASUS Nexus 7(2013)[10] LTE OS AndroidOSversion 4.

5 ASUS Nexus 7(2013)[10] LTE OS AndroidOSversion ( Recommend Dialog 1 Delete Dialog 2 )20 1 Recommend Dialog Delete Dialog i R i (1) nr (2) Recommend Dialog Delete Dialog { 1 R i = (1) 0 n i=1 R = R i 100 (2) n c 2015 Information Processing Society of Japan 5

6 1 (%) ( ) Recommend Delete Invert Dialog Clear Dialog Question Dialog ASUS Nexus 7(2013)[10] LTE OS AndroidOSversion SD ( Invert Dialog 1 Clear Dialog 2 Question Dialog 1 ) i S i (3) n S (4) (3) SMSSMS Question Dialog Question Dialog Question Dialog 1 S i = (3) n i=1 S = S i 100 (4) n 2 (%) ( ) Invert Clear Question Recommend Dialog c 2015 Information Processing Society of Japan 6

7 Recommend Dialog Android OS Delete Dialog Delete Dialog Question Dialog Question Dialog 10 Invert Dialog Clear Dialog ( ) 6.4 c 2015 Information Processing Society of Japan 7

8 Bravo-Lillo[12] Windows Khovanskaya[13] 7. Android Recommend Dialog Delete Dialog Invert Dialog Clear Dialog Question Dialog Recommend Dialog Question Dialog [1] KINDSIGHT SECURITY LABS: MAL- WARE REPORT - Q (online), whitepapers/2014/9861-kindsight-security-labsmalware-report-q pdf (accessed ). [2] TREND MICRO, Trend Micro Mobile Security, ( ). [3] Google Play, & Lookout, ( ). [4] Google Play, Mobile Security & Antivirus, com.avast.android.mobilesecurity ( ). [5] Patrick Gage Kelley, Sunny Consolvo, Lorrie Faith Cranor, Jaeyeon Jung, Norman Sadeh, David Wetherall: A conundrum of permissions: installing applications on an android smartphone, In Proc. FC 12, pp (2012). [6] Patrick Gage Kelley, Lorrie Faith Cranor, Norman Sadeh: Privacy as Part of the App Decision-Making Process, In Proc. CHI 13, pp (2013). [7] Marian Harbach, Markus Hettig, SusanneWeber, Matthew Smit: Using Personal Examples to Improve Risk Communication for Security and Privacy Decisions, In Proc. CHI 14, pp (2014). [8] Rebecca Balebako, Jaeyeon Jung, Wei Lu, Lorrie Faith Cranor, Carolyn Nguyen: Little brothers watching you : raising awareness of data leaks on smartphones, In Proc. SOUPS 13, Article No. 12 (2013). [9] Vol.52 No.1 pp [10] ASUS, Nexus7 (online), Mobile/Nexus 7/ (accessed ). [11],, ( ). [12] Cristian Bravo-Lillo, Lorrie Cranor, Saranga Komanduri: Harder to Ignore? Revisiting Pop-Up Fatigue and Approaches to Prevent It, In Proc. SOUPS 14, pp (2014). [13] Vera Khovanskaya, Eric P.S. Baumer, Dan Cosley, Stephen Voida, Geri Gay: Everybody knows what you re doing : a critical design approach to personal informatics, In Proc. CHI 13, pp (2013). c 2015 Information Processing Society of Japan 8

Σχετικά έγγραφα

IPSJ SIG Technical Report Vol.2014-CE-127 No /12/6 CS Activity 1,a) CS Computer Science Activity Activity Actvity Activity Dining Eight-He

IPSJ SIG Technical Report Vol.2014-CE-127 No /12/6 CS Activity 1,a) CS Computer Science Activity Activity Actvity Activity Dining Eight-He CS Activity 1,a) 2 2 3 CS Computer Science Activity Activity Actvity Activity Dining Eight-Headed Dragon CS Unplugged Activity for Learning Scheduling Methods Hisao Fukuoka 1,a) Toru Watanabe 2 Makoto