Context-Dependent Privacy and Security Management on Mobile Devices

There are ongoing security and privacy concerns regarding mobile platforms that are being used by a growing number of citizens. Security and privacy models typically used by mobile platforms use one-time permission acquisition mechanisms. However, modifying access rights after initial authorization in mobile systems is often too tedious and complicated for users. User studies show that a typical user does not understand permissions requested by applications or are too eager to use the applications to care to understand the permission implications. For example, the Brightest Flashlight application was reported to have logged precise locations and unique user identifiers, which have nothing to do with a flashlight application’s intended functionality, but more than 50 million users used a version of this application which would have forced them to allow this permission. Given the penetration of mobile devices into our lives, a fine-grained context-dependent security and privacy control approach needs to be created.

We have created Mithril as an end-to-end mobile access control framework that allows us to capture access control needs for specific users, by observing violations of known policies. The framework studies mobile application executables to better inform users of the risks associated with using certain applications. The policy capture process involves an iterative user feedback process that captures policy modifications required to mediate observed violations. Precision of policy is used to determine convergence of the policy capture process. Policy rules in the system are written using Semantic Web technologies and the Platys ontology to define a hierarchical notion of context. Policy rule antecedents are comprised of context elements derived using the Platys ontology employing a query engine, an inference mechanism and mobile sensors. We performed a user study that proves the feasibility of using our violation driven policy capture process to gather user-specific policy modifications.

We contribute to the static and dynamic study of mobile applications by defining “application behavior” as a possible way of understanding mobile applications and creating access control policies for them. Our user study also shows that unlike our behavior-based policy, a “deny by default” mechanism hampers usability of access control systems. We also show that inclusion of crowd-sourced policies leads to further reduction in user burden and need for engagement while capturing context-based access control policy. We enrich knowledge about mobile “application behavior” and expose this knowledge through the Mobipedia knowledge-base. We also extend context synthesis for semantic presence detection on mobile devices by combining Bluetooth, low energy beacons and Nearby Messaging services from Google.

 AFAC Funding Application Process

The UMBC Adjunct Faculty Advisory Committee (AFAC) has been allocated a yearly amount of funding to support adjunct faculty. 

Among other activities, the AFAC is committed to supporting adjunct faculty in research and professional development. 

Note: This award is capped at $500 per individual per academic year. ROLLING DEADLINE, apply timely.

What the award might cover or defray: 

·                     Expenses (travel, fees, etc.) to PRESENT at a conference – papers, panels, or visual arts/other presentations; transportation or costs required to present

·                     Expenses to PRESENT at another university – seminar, demonstration

·                     Support for courses or for professional training in some instances

What the award would not cover or defray: 

·                     Most dues for professional organizations

·                     Most memberships in associations

·                     Subscriptions to periodicals or for services

For obvious reasons, we cannot spend a disproportionate amount on one individual or on a single trip. Local conferences may be a feasible option. If you are committed to attending a professional conference, then by all means apply for funding to defray all or part of your costs.

Application procedure: 

1)      Send an email to the AFAC with a short, specific proposal. Include a one-page executive summary; please provide the time and place of the conference/seminar, name of event, and name of host institution. Document the invitation or conference program; explain your participation in the conference; and/or document your acceptance. (For example, scan and submit a copy of the program and/or your invitation, etc.)

2)      Please attach your credentials with your academic specialization, briefly explain your project in the context of your work at UMBC, and include a short bio.

3)      Please include the dollar amount you are applying for, and document the costs it will defray. Briefly state whether this is supplemental funding.

4)      Only one successful application per individual per academic year.

5)      The AFAC reads your application and will get back to you with any questions.

6)      AFAC decideS as soon as possible whether to award funding. We enthusiastically support research and professional development by adjunct faculty.

7)      Note that we cannot pay expenses in advance. If your application is approved, please document your participation and expenses afterward for reimbursement.

Beta Kappa is painting campus burgundy and grey again starting next week! Swing by our table at Involvement Fest, and MGC Open House. Learn more about what our sisterhood stands for and how it's a lifetime commitment to Unity, Love, and Respect. Learn about Greek Life, traditions, and what connects us all. Last but not least, wrap it all up with a dinner featuring your favorite Lambda Ladies. RSVP for more info! See you next week, Retrievers! Keep an eye out for the burgundy and grey!