@inproceedings{3b8868e3c0a54f6aa29b24611f670cc3,
title = "Detecting Data Leakage from Databases on Android Apps with Concept Drift",
abstract = "Mobile databases are the statutory backbones of many applications on smartphones, and they store a lot of sensitive information. However, vulnerabilities in the operating system or the app logic can lead to sensitive data leakage by giving the adversaries unauthorized access to the app's database. In this paper, we study such vulnerabilities to define a threat model, and we propose an OS-version independent protection mechanism that app developers can utilize to detect such attacks. To do so, we model the user behavior with the database query workload created by the original apps. Here, we model the drift in behavior by comparing probability distributions of the query workload features over time. We then use this model to determine if the app behavior drift is anomalous. We evaluate our framework on real-world workloads of three different popular Android apps, and we show that our system was able to detect more than 90\% of such attacks.",
keywords = "Cyberattack, Database systems, Mobile applications, Mobile security, Query processing",
author = "Gokhan Kul and Shambhu Upadhyaya and Varun Chandola",
note = "Publisher Copyright: {\textcopyright} 2018 IEEE.; 17th IEEE International Conference on Trust, Security and Privacy in Computing and Communications and 12th IEEE International Conference on Big Data Science and Engineering, Trustcom/BigDataSE 2018 ; Conference date: 31-07-2018 Through 03-08-2018",
year = "2018",
month = sep,
day = "5",
doi = "10.1109/TrustCom/BigDataSE.2018.00129",
language = "English",
isbn = "9781538643877",
series = "Proceedings - 17th IEEE International Conference on Trust, Security and Privacy in Computing and Communications and 12th IEEE International Conference on Big Data Science and Engineering, Trustcom/BigDataSE 2018",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "905--913",
booktitle = "Proceedings - 17th IEEE International Conference on Trust, Security and Privacy in Computing and Communications and 12th IEEE International Conference on Big Data Science and Engineering, Trustcom/BigDataSE 2018",
address = "United States",
}