Safe Execution of Dynamically Loaded Code on Mobile Phones

Glen Pink; Simon Gerber; Michael Fry; Judy Kay; Bob Kummerfeld; Rainer Wasinger

Mobile and Ubiquitous Systems: Computing, Networking, and Services. 7th International ICST Conference, MobiQuitous 2010, Sydeny, Australia, December 6-9, 2010, Revised Selected Papers

Research Article

Safe Execution of Dynamically Loaded Code on Mobile Phones

Download

405 downloads

Cite: BibTeX Plain Text

@INPROCEEDINGS{10.1007/978-3-642-29154-8_1,
    author={Glen Pink and Simon Gerber and Michael Fry and Judy Kay and Bob Kummerfeld and Rainer Wasinger},
    title={Safe Execution of Dynamically Loaded Code on Mobile Phones},
    proceedings={Mobile and Ubiquitous Systems: Computing, Networking, and Services. 7th International ICST Conference, MobiQuitous 2010, Sydeny, Australia, December 6-9, 2010, Revised Selected Papers},
    proceedings_a={MOBIQUITOUS},
    year={2012},
    month={10},
    keywords={Client-side user modelling security frameworks personalised mobile applications},
    doi={10.1007/978-3-642-29154-8_1}
}

Glen Pink
Simon Gerber
Michael Fry
Judy Kay
Bob Kummerfeld
Rainer Wasinger
Year: 2012
Safe Execution of Dynamically Loaded Code on Mobile Phones
MOBIQUITOUS
Springer
DOI: 10.1007/978-3-642-29154-8_1

Glen Pink¹^,*, Simon Gerber¹^,*, Michael Fry¹^,*, Judy Kay¹^,*, Bob Kummerfeld¹^,*, Rainer Wasinger¹^,*

1: University of Sydney

*Contact email: gpin7031@sydney.edu.au, sger6218@sydney.edu.au, Michael.Fry@sydney.edu.au, Judy.Kay@sydney.edu.au, Bob.Kummerfeld@sydney.edu.au, Rainer.Wasinger@sydney.edu.au

Abstract

Mobile phones are devices, and as such there is an increasing need for personalised, context-aware applications. This paper describes DCEF (Dynamic Code Execution Framework), a framework which allows applications to securely execute dynamically loaded code, providing new functionality such as client-side personalisation. DCEF ensures the user’s personal information remains safe while executing code from potentially untrusted sources. Our contributions are: the abstract design of DCEF; an evaluation of the security of our design; the implementation of DCEF; a demonstration that runtime performance is acceptable and validation of DCEF by using it to create an application which provides personalised information delivery about cultural heritage and museum sites.

Keywords: Client-side user modelling security frameworks personalised mobile applications

Published: 2012-10-10

: http://dx.doi.org/10.1007/978-3-642-29154-8_1