AppShell: Making data protection practical for lost or stolen Android devices

摘要: Mobile apps continue to consume increasing amounts of sensitive data, such as banking credentials and classified documents. At the same time, number smartphone thefts is at a rapid speed. As result, there an imperative need protect data on lost or stolen mobile devices. In this work, we develop practical solution Our enables adaptive protection by pro-actively stepping up down security based perceived contextual risk device. We realize our for Android platform in form system called AppShell. AppShell does not require root privilege, nor any modification underlying framework, hence ready-to-deploy solution. It supports both in-memory on-disk transparently encrypting discarding encryption key, when required, enhanced protection. implement working prototype evaluate it against several popular apps. results show that can successfully devices with reasonable performance overhead.