A Risk Assessment Framework for Mobile Apps in Mobile Cloud Computing Environments

Simple item page
aut.relation.endpage271
aut.relation.issue8
aut.relation.journalFuture Internet
aut.relation.startpage271
aut.relation.volume16
dc.contributor.authorOgwara, Noah Oghenefego
dc.contributor.authorPetrova, Krassie
dc.contributor.authorYang, Mee Loong
dc.contributor.authorMacDonell, Stephen G
dc.date.accessioned2024-08-14T03:05:44Z
dc.date.available2024-08-14T03:05:44Z
dc.date.issued2024-07-29
dc.description.abstractMobile devices (MDs) are used by mobile cloud computing (MCC) customers and by other users because of their portability, robust connectivity, and ability to house and operate third-party applications (apps). However, the apps installed on an MD may pose data security risks to the MD owner and to other MCC users, especially when the requested permissions include access to sensitive data (e.g., user’s location and contacts). Calculating the risk score of an app or quantifying its potential harmfulness based on user input or on data gathered while the app is actually running may not provide reliable and sufficiently accurate results to avoid harmful consequences. This study develops and evaluates a risk assessment framework for Android-based MDs that does not depend on user input or on actual app behavior. Rather, an app risk evaluator assigns a risk category to each resident app based on the app’s classification (benign or malicious) and the app’s risk score. The app classifier (a trained machine learning model) evaluates the permissions and intents requested by the app. The app risk score is calculated by applying a probabilistic function based on the app’s use of a set of selected dangerous permissions. The results from testing of the framework on an MD with real-life resident apps indicated that the proposed security solution was effective and feasible.
dc.identifier.citationFuture Internet, ISSN: 1999-5903 (Print); 1999-5903 (Online), MDPI AG, 16(8), 271-271. doi: 10.3390/fi16080271
dc.identifier.doi10.3390/fi16080271
dc.identifier.issn1999-5903
dc.identifier.issn1999-5903
dc.identifier.urihttp://hdl.handle.net/10292/17888
dc.languageen
dc.publisherMDPI AG
dc.relation.urihttps://www.mdpi.com/1999-5903/16/8/271
dc.rights© 2024 by the authors. Licensee MDPI, Basel, Switzerland. This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution (CC BY) license (https://creativecommons.org/licenses/by/4.0/).
dc.rights.accessrightsOpenAccess
dc.rights.urihttps://creativecommons.org/licenses/by/4.0/
dc.subject46 Information and Computing Sciences
dc.subject4604 Cybersecurity and Privacy
dc.subjectNetworking and Information Technology R&D (NITRD)
dc.subject46 Information and computing sciences
dc.titleA Risk Assessment Framework for Mobile Apps in Mobile Cloud Computing Environments
dc.typeJournal Article
pubs.elements-id564020
Files
Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
Ogwara et al_2024_A risk assessment framework.pdf
Size:
569.03 KB
Format:
Adobe Portable Document Format
Description:
Journal article
Download
Collections
School of Engineering, Computer and Mathematical Sciences - Te Kura Mātai Pūhanga, Rorohiko, Pāngarau