SPSM 2011 - Workshop on Security and Privacy in Smartphones and Mobile Devices (SPSM)

Mobile devices such as smartphones and Internet tablets have achieved computing and networking capabilities comparable to traditional personal computers. Their successful consumerization has also become source of pain for adopting users and organizations. For example, the wide-spread presence of information-stealing applications raises substantial security and privacy concerns. The operating systems supporting these new devices have both advantages and disadvantages with respect to offered security. On one hand, they use application sandboxing to contain exploits and limit privileges given to malware. On the other hand, they collect and organize many forms of security and privacy sensitive information simply as a matter of operation, and make that information easily accessible to downloaded third-party applications.

Recognizing smartphone security and privacy as the emerging area, this workshop intends to provide a venue for interested researchers and practitioners to get together and exchange ideas, thus to deepen our understanding to various security and privacy issues on smartphones, specifically the platforms such as iOS and Android. Topics of interests include (but are not limited to) the following subject categories:

Threat models and attack scenarios
Rogue mobile application detection and recovery
Security solutions for Android and iOS applications, marketplaces and users
Smartphone-centric regulatory compliance issues and mechanisms
Mobile application sandboxing and virtualization
Secure identity management
Hardware-engineered security solutions
Unlocking, jailbreaking and threat from rootkits
Leveraging Internet connectivity for Cloudsourcing security
Security enforcement via data service provider
Mutual threats between smartphones and social networks
We also would like to especially encourage novel paradigms and controversial ideas that are not on the above list. The workshop is to act as a venue for creative debate and interaction in security- and privacy-sensitive areas of computing and communication impacted by smartphones.