The Transitivity of Trust Problem in the Interaction of Android Applications

Mobile phones have developed into complex platforms with large numbers of installed applications and a wide range of sensitive data. Application security policies limit the permissions of each installed application. As applications may interact, restricting single applications may create a false sense of security for the end users while data may still leave the mobile phone through other applications. Instead, the information flow needs to be policed for the composite system of applications in a transparent and usable manner. In this paper, we propose to employ static analysis based on the software architecture and focused data flow analysis to scalably detect information flows between components. Specifically, we aim to reveal transitivity of trust problems in multi-component mobile platforms. We demonstrate the feasibility of our approach with Android applications, although the generalization of the analysis to similar composition-based architectures, such as Service-oriented Architecture, can also be explored in the future

Integrating Mobile Tasks with Business Processes: A Self-Healing Approach

Process management technology constitutes a fundamental component of any service-driven computing environment. Process management facilitates both the composition of services at design time and their orchestration at run time. In particular, when applying the service paradigm to enterprise integration management, high flexibility is required. In this context, atomic as well as composite services representing the business functions should be quickly adaptable to cope with dynamic business changes. Furthermore, they should enable mobile and quick access to enterprise information. The growing maturity of smart mobile devices has fostered their prevalence in knowledge-intensive areas in the enterprise as well. As a consequence, process management technology needs to be enhanced with mobile task support. However, tasks hitherto executed stationarily, cannot be simply transferred in order to run on smart mobile devices. Many research groups focus on the partitioning of processes and the distributed execution of the resulting fragments on smart mobile devices. Opposed to this fragmentation concept, this chapter proposes an approach to enable the robust and flexible execution of single process tasks on smart mobile devices by provisioning self-healing techniques to address the smooth integration of mobile tasks with business processes