A cloud-based intrusion detection system for Android smartphones
R. S. Khune, J. Thangakumar · 2012
Cloud computing is primarily being use for eliminating the need of local information resources. The ability of cloud provides vast range of services on web. As Smartphone usage has been continuously increasing in recent years, but due to its complexity and functionality, they are also vulnerable to the attacks such as virus, Trojans and worms. The smart phones have limited storage, processing and computational power to execute highly complex algorithms for intrusion detection and implementing signature based attack detection. In this paper, we propose a cloud based intrusion detection and recovery system for Android smart mobile phones that provides continuous in-depth forensic analysis to detect any misbehaviour in network. The mechanism performs analysis on the virtualized and synchronized replica of an actual device in the cloud environment. The analysis on the emulated device includes running multiple detection engines in parallel, memory scanners and system call anomaly detection that generate responses in event of attack. The responses are instructs to mobile agent installed on the device to take essential actions and perform recovery of device if needed.