A Risk Assessment Method for Smartphones - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2012

A Risk Assessment Method for Smartphones

Résumé

Smartphones are multi-purpose ubiquitous devices, which face both, smartphone-specific and typical security threats. This paper describes a method for risk assessment that is tailored for smartphones. The method does not treat this kind of device as a single entity. Instead, it identifies smartphone assets and provides a detailed list of specific applicable threats. For threats that use application permissions as the attack vector, risk triplets are facilitated. The triplets associate assets to threats and permission combinations. Then, risk is assessed as a combination of asset impact and threat likelihood. The method utilizes user input, with respect to impact valuation, coupled with statistics for threat likelihood calculation. Finally, the paper provides a case study, which demonstrates the risk assessment method in the Android platform.
Fichier principal
Vignette du fichier
978-3-642-30436-1_36_Chapter.pdf (174.79 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01518232 , version 1 (04-05-2017)

Licence

Paternité

Identifiants

Citer

Marianthi Theoharidou, Alexios Mylonas, Dimitris Gritzalis. A Risk Assessment Method for Smartphones. 27th Information Security and Privacy Conference (SEC), Jun 2012, Heraklion, Crete, Greece. pp.443-456, ⟨10.1007/978-3-642-30436-1_36⟩. ⟨hal-01518232⟩
152 Consultations
1808 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More