Protection profile for the smartphone operating system
by Jun Sang; Daxiang Hong; Bing Zhang; Hong Xiang; Li Fu
International Journal of Embedded Systems (IJES), Vol. 6, No. 1, 2014

Abstract: With the development of communication industry, the smartphone plays a more important role in people's lives, providing a rich functionality with a variety of operating system platforms (such as: Symbian, Windows Mobile, Android, etc.). However, since the internet becomes increasingly complex and changeable brought by the cyber threats and vulnerabilities, more and more manufacturers focus on the security evaluation of smartphone operating system to make their product more secure. At present, the international security assessment criteria of information product is the common criteria (CC), which is the foundation of the protection profile (PP) and can provide function requirements and assurance requirements as the basis for security evaluation. In view of this fact, this paper researches the security mechanisms and analyses the risk factors in different smartphone operating systems. Then, this paper determines the security objectives and security requirements used for the common smartphone operating system. Finally, this paper proposes the corresponding protection profile in EAL4+ (evaluation assurance level 4 including the extended security assurance requirements) for the smartphone operating system based on the CC.

Online publication date: Thu, 31-Jul-2014

The full text of this article is only available to individual subscribers or to users at subscribing institutions.

 
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.

Pay per view:
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.

Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Embedded Systems (IJES):
Login with your Inderscience username and password:

Username:        Password:          Forgotten your password?

Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.

If you still need assistance, please email subs@inderscience.com