Fabian Berner, Johannes Sametinger,
"Information Disclosure Detection in Cyber-Physical Systems"
: IWCFS 2019 - 3rd International Workshop onCyber-Security and Functional Safety in Cyber-Physical Systems,Linz, Austria, August 26-29, 2019, Vol. 1062, 2019
Information Disclosure Detection in Cyber-Physical Systems
Sprache des Titels:
IWCFS 2019 - 3rd International Workshop onCyber-Security and Functional Safety in Cyber-Physical Systems,Linz, Austria, August 26-29, 2019
The detection of information disclosure attacks, i.e. the unauthorized disclosure of sensitive data, is a dynamic research field. The disclosure of sensitive data can be detected by various static and dynamic security analysis methods. In the context of Android, dynamic taint-tracking systems like Taintdroid have turned out to be especially promising. Here we present a simulation environment, which is based on existing dynamic taint-tracking systems. It extends these and changes the analysis concept behind the taint-tracking system it uses. While taint-tracking is mainly used for mobile devices running Android, we postulate the importance of detecting information disclosure in any cyber-physical system. In this paper, we explore the detection of information disclosure by simulating devices and monitoring the information flows inside and among the devices.