English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

The scheme of application (app) distribution systems involving incentivizedthird-party app vendors is a desirable option for the emerging edge computingsystems. However, such a scheme also brings various security challenges asfaced by the current mobile app distribution systems. In this paper, we study athreat named covert device association, in which the vendors of two appscollude to figure out which of their app installations run on the same edgedevice. If the two colluding apps are popular, the threat can be used to launchvarious types of further attacks at scale. For example, the user of thecompromised edge device, who wishes to remain anonymous to one of the two apps,will be de-anonymized if the user is not anonymous to the other app. Moreover,the coalition of the two apps will have an escalated privilege set that is theunion of their individual privilege sets. In this paper, we implement thethreat by a reliable and ubiquitous covert channel based on the edge deviceprocessor workload. The implementations on three edge devices (two smartphonesand an embedded compute board) running Android and Android Things do notrequire any privileged permissions. Our implementations cover three attackscenarios of 1) two apps running on the same Android phone, 2) an app and a websession in the Tor browser running on the same Android phone, and 3) two appsrunning on the same Android Things device. Experiments show that the covertchannel gives at least 0.25 bps data rate and the covert device associationtakes at most 3.2 minutes.

Covert Association of Applications on Edge Devices by Processor Workload