CSAIL Event Calendar

Building a Secure Foundation for Mobile Apps

Abstract: Security for applications running on mobile devices is important. In this talk we present ExpressOS, a new OS for enabling high-assurance apps to run on commodity mobile devices securely. Our main contributions are a new OS architecture and our use of formal methods for proving key security invariants about our implementation. In our use of formal methods, we focus solely on proving that our OS implements our security invariants correctly, rather than striving for full functional correctness, requiring significantly less verification effort while still proving the security relevant aspects of our system.

We built ExpressOS and tested its performance. Our evaluation shows that the performance of ExpressOS is comparable to an Android-based system. In one test, we ran the same web browser on Rach and on an Android-based system and found that ExpressOS adds 30% overhead on average to the page load latency time for nine popular web sites.

Bio: Haohui Mai is a fifth-year Ph.D. student in University of Illinois, at Urbana-Champaign, advised by Sam King. He is interested in improving the security and reliability of real-world computer system.

See other events that are part of CSAIL Security Seminar 2012/2013

See other events happening in January 2013