English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Virtualization is frequently used to isolate untrusted processes and controltheir access to sensitive resources. However, isolation usually carries a pricein terms of less resource sharing and reduced inter-process communication. Inan open architecture such as Android, this price and its impact on performance,usability, and transparency must be carefully considered. Although previousefforts in developing general-purpose isolation solutions have shown that someof these negative side effects can be mitigated, doing so involves overcomingsignificant design challenges by incorporating numerous additional platformcomplexities not directly related to improved security. Thus, the generalpurpose solutions become inefficient and burdensome if the end-user has onlyspecific security goals. In this paper, we present PINPOINT, a resourceisolation strategy that forgoes general-purpose solutions in favor of a"building block" approach that addresses specific end-user security goals.PINPOINT embodies the concept of Linux Namespace lightweight isolation, butdoes so in the Android Framework by guiding the security designer towardsisolation points that are contextually close to the resource(s) that need to beisolated. This strategy allows the rest of the Framework to function fully asintended, transparently. We demonstrate our strategy with a case study onAndroid System Services, and show four applications of PINPOINTed systemservices functioning with unmodified market apps. Our evaluation results showthat practical security and privacy advantages can be gained using ourapproach, without inducing the problematic side-effects that othergeneral-purpose designs must address.

PINPOINT: Efficient and Effective Resource Isolation for Mobile Security and Privacy