Security considerations related to the use of mobile devices in the operation of critical infrastructures

摘要: An increasing number of attacks by mobile malware have begun to target critical infrastructure assets. Since attempts defeat the security mechanisms provided an operating system, it is paramount importance understand strengths and weaknesses frameworks device systems such as Android. Many recently discovered vulnerabilities suggest that issues may be hidden in cross-layer interplay between Android layers underlying Linux kernel. This paper presents empirical evaluation interactions layers. The experiments indicate Security Framework does not discriminate callers invocations kernel, thereby enabling applications directly interact with shows how this trait allows adversely affect devices exploiting previously unknown unveiled analyses interplay. impact resulting on infrastructures discussed. Finally, enhancement proposed for detecting preventing direct kernel applications, dramatically reducing malware.