Journal

Authors: Damopoulos D., Kambourakis G., Anagnostopoulos M., Gritzalis S., Park J.
Title: User privacy and modern mobile services: Are they on the same path?
Journal: Personal and Ubiquitous Computing
Volume: 17
Number: 7
Pages: 1437-1448
Year: 2013
Publisher: Springer
To appear: No
Link: http://link.springer.com/content/pdf/10.1007%2Fs00779-012-0579-1.pdf
ISI: Yes
Impact Factor: 1.616
File name: draft_journal_iDNS.pdf##^^&&174341736.pdf
Abstract: Perhaps, the most important parameter for any mobile application or service is the way it is delivered and experienced by the end-users, who usually, in due course, decide to keep it on their software portfolio or not. Most would agree that security and privacy have both a crucial role to play toward this goal. In this context, the current paper revolves around a key question: Do modern mobile applications respect the privacy of the end-user? The focus is on the iPhone platform security and especially on user’s data privacy. By the implementation of a DNS poisoning malware and two real attack scenarios on the popular Siri and Tethering services, we demonstrate that the privacy of the end-user is at stake.