Authors: | Damopoulos D., Kambourakis G., Anagnostopoulos M., Gritzalis S., Park J. |
---|
Title: | User privacy and modern mobile services: Are they on the same path? |
---|
Journal: | Personal and Ubiquitous Computing |
---|
Volume: | 17 |
---|
Number: | 7 |
---|
Pages: | 1437-1448 |
---|
Year: | 2013 |
---|
Publisher: | Springer |
---|
To appear: | No |
---|
Link: | http://link.springer.com/content/pdf/10.1007%2Fs00779-012-0579-1.pdf |
---|
ISI: | Yes |
---|
Impact Factor: | 1.616 |
---|
File name: | draft_journal_iDNS.pdf##^^&&174341736.pdf |
---|
Abstract: | Perhaps, the most important parameter for any
mobile application or service is the way it is delivered and experienced by the end-users, who usually, in due course, decide to keep it on their software portfolio or not. Most would agree that security and privacy have both a crucial role to play toward this goal. In this context, the current paper revolves around a key question: Do modern mobile applications respect the privacy of the end-user? The focus is on the iPhone platform security and especially on user’s data privacy. By the implementation of a DNS poisoning malware and two real attack scenarios on the popular Siri and Tethering services, we demonstrate that the privacy of the end-user is at stake. |