p1.l03 2 (49s)mobile os and security aspects examples 20140109

8/11/2019 P1.L03 2 (49s)Mobile OS and Security Aspects Examples 20140109

1/49

...

Market Overview of Mobile OperatingSystems and Security Aspects

Lecture 11

Mobile Business I (WS 2013/14)

Prof. Dr. Kai RannenbergDeutsche Telekom Chair of Mobile Business & Multilateral SecurityJohann Wolfgang Goethe University Frankfurt a. M.


2/49

...

Overview - Market Overview of Mobile OperatingSystems and Security Aspects

The Market for mobile devices and mobile OSMobile OS unavailable to other device manufacturers

OverviewPalm OS

Apple iOS (Unix-based)Manufacturer-independent mobile OSOverviewSymbian platform (by Symbian Foundation)Embedded Linux

Android (by Open Handset Alliance)Microsoft Windows CE, Pocket PC, Pocket PC Phone Edition, MobileMicrosoft Windows Phone 8Firefox OS

Security features of selected mobile OS2


3/49

...

Worldwide Smartphone Sales to EndUsers by Operating System (2009-2013)

7%5%

3%2% 2% 3%

3% 3%

9%

17%

33%

43%

51%

64%

70%

79%

16% 17% 16% 18%

24%

19%21%

14%

20%19%

14%12%

9%

5%

44%

41%

31%

22%

12%

1% 0%

Q4 2009 Q2 2010 Q4 2010 Q2 2011 Q4 2011 Q2 2012 Q4 2012 Q2 2013

Others Windows Android iOS BlackBerry OS Symbian Bada

3


4/49

...

Android 64,2%

iOS 18,8%

Windows 2,6%

BlackBerry OS 5,2%

Bada 2,7%

Symbian 5,9%

Others 0,6%

Android iOS Windows BlackBerry OS Bada Symbian Others

Worldwide Smartphone Sales to EndUsers by Operating System (Q2 2012)

4

[Gartner2013]


5/49

...

Android 79,0%

iOS 14,2%

Windows 3,3%

BlackBerry OS 2,7%

Bada 0,4%

Symbian 0,3%Others 0

,2%

Android iOS Windows BlackBerry OS Bada Symbian Others

Worldwide Smartphone Sales to EndUsers by Operating System (Q2 2013)

5

[Gartner2013]


6/49

...

Android 51,9%

iOS 34,3%

BlackBerry OS 8,0%

Others 5,9%

Android iOS BlackBerry OS Others

US installed smart phone baseby Operating System (July 2012)

6

[Nielsen2012]

During July 2012,51,9% ofsmartphone ownersin the US had adevice that runs onthe Android

operating system.


7/49

...

Android 52,0%

iOS 40,0%

BlackBerry OS 3,0%

Windows 2,0%

Others 2,0%

Android iOS BlackBerry OS Windows Others

US installed smart phone baseby Operating System (Q2 2013)

7

[Nielsen2013]

During Q2 2013an average of 52%of smartphoneowners in the UShad a handsetthat runs on the

Android operatingsystem.


8/49

...

Worldwide Smartphone Sales to End Usersby Operating SystemQ2-2013 vs. Q2-2012

Operating System 2Q13 Units

2Q13 MarketShare (%)

2Q12 Units


Android 177,898.2 79.0 98,664.0 64.2

iOS 31,899.7 14.2 28,935.0 18.8Microsoft 7,407.6 3.3 4,039.1 2.6BlackBerry 6,180.0 2.7 7,991.2 5.2Bada 838.2 0.4 4,208.8 2.7Symbian 630.8 0.3 9,071.5 5.9

Others 471.7 0.2 863.3 0.6TOTAL 225,326.2 100.0 153,772.9 100.0

8

In 1.000 Units

[Gartner2013]


9/49

...

Worldwide Smartphone Sales to End Usersby Vendor

Q2-2013 vs. Q2-2012

Company 2Q13 Units


2Q12 Units


Samsung 71,380.9 31.7 45,603.8 29.7

Apple 31,899.7 14.2 28,935.0 18.8

LG Electronics 11,473.0 5.1 5,827.8 3.8

Lenovo 10,671.4 4.7 4,370.9 2.8

ZTE 9,687.6 4.3 6,331.4 4.1

Others 90,213.6 40.0 62,704.0 40.8TOTAL 225,326.2 100.0 153,772.9 100.0

9[Gartner2013]

In 1.000 Units


10/49


11/49

...

Mobile Devices vs.Stationary Devices

Due to the limitations of the mobile devices,mobile operating systems also have to cope with

the following challenges:Limited device capabilities and resources (storage,memory, processing time, etc.)

Usability issues

Security and system integrity issues

11


12/49

...


12


OverviewPalm OS

Apple iOS (Unix-based)Manufacturer-independent mobile OSOverviewSymbian platform (by Symbian Foundation)Embedded Linux


Security features of selected mobile OS


13/49


14/49


15/49

...


15


OverviewPalm OSApple iOS (Unix-based)

Manufacturer-independent mobile OSOverviewSymbian platform (by Symbian Foundation)Embedded Linux




16/49

...

Palm OSDevices

16


17/49

...

Palm OSOverview

The operating system is made by palmsource Several device manufacturers:

Palm (e.g. Treo series)HandspringGarmin (navigation devices)FossilSamsungSony

Current version 6.1 (Cobalt)There are no devices using version 6.1 on the market. Most of the devices areequipped with Palm OS 5.4 (Garnet), such as the Tungsten series.

17


18/49

...

Palm OSFeatures

Communication:IrDABluetoothWiFi (IEEE 802.11)

GSM/GPRSCDMASupport of the TCP/IP network protocolIntegrated personal information management (PIM)Support for several encryption and security algorithms(e.g. RSA, SHA1, RC4)Large choice of 3rd party software availableLong battery life

18


19/49

...

Palm OSHistory

1996: Palm Pilot 1000, first device using Palm OS1998: Palm III using Palm OS v32000: Palm IIIc, first device using Palm OS and a colour display

2003: Palm OS 52004: Palm OS 6.1 (Cobalt) and Palm OS 5.4 (Garnet)2006: Palm s Treo Smartphones with Windows MobileName change to Garnet OS future versions to be based on theAccess Linux platform

2010: Hewlett-Packard acquired Palm for $1,2 billion, namechange to HPwebOS2011: HP announced to stop the production of all HPwebOSdevices, including smart phones and tablets

19


20/49

...


20







21/49

...

Apple iOS

Developed by Apple for iPhone, iPodTouch, iPad and Apple TVLatest release: iOS 7iOS derived from Mac OS X,a Unix-based operating systemApple does not permit the OS to runon third-party hardwareUser-interface uses multi-touchgestures

21


22/49

...


22







23/49

...

Linux: LiMo (Linux Mobile), Openmoko Linux, Qt Extended (Qtopia)Symbian platform

Latest release: Nokia Belle Feature Pack 2 for Symbian^3 devices

Android (by Open Handset Alliance)Latest release: 4.4 (KitKat)

Windows MobileLatest release: Windows Mobile 6.5.5Windows Phone

Latest release: Windows Phone 8.0 Update 3 (General Distribution Release GDR3)

Maemo (by Nokia) MeeGo (by Nokia, Intel) Sailfish OS (by Jolla)Latest release: Sailfish OS 1.0

Tizen (by Samsung, Intel, Linux Foundation)Latest release: 1.0 (Codename Larkspur)

Firefox OS (by non-profit organisation Mozilla)Latest release: 1.1.0

China-Focused Mobile OSCurrently under development by Taiwan-based HTC

Manufacturer-independentmobile OS

= Linux-based23

[WSJ2013]


24/49

...


24







25/49


26/49

...

SymbianConsortium/Licensees

[Symbian2006]In 2006, Symbian was owned by 26


27/49

...

Symbian History1998-2008

Symbian was founded as a privately owned company in June 1998.Owner: Ericsson, Nokia, Panasonic, Psion, Samsung Electronics,Siemens and Sony Ericsson

Open Symbian OS telephones were available since 2001

Open : It is possible to install 3 rd-party applications.

Beginning of 2001: Nokia 9210 Communicator

2004: Symbian OS 8.0

2005: Symbian OS 9.1 (S60 3rd edition)

2006: Symbian OS 9.3 released, extending the OS with WiFi andHSDPA

2007: Symbian OS 9.4 (S60 5th edition) = Symbian^1 (SymbianOne )

2008 June: Symbian Foundation announced

2008 December: Nokia buys Symbian Ltd. and becomes the majorcontributor to code of Symbian platform

27


28/49

...

Symbian History2009-2014

2009: Symbian Foundation foundedSymbian platform successor to Symbian OS and Nokia Series 60 .

2010: Symbian OS 9.5 (Symbian^3). Nokia N8 first smartphone to run Symbian^3.

2010 November: Due to a lack of support from funding members, SymbianFoundation transition into a licensing-only organisation

2011: Symbian Anna and Symbian Belle as an update to Symbian^3

2011 February: Nokia collaborates with Microsoft and adopts Windows Phone 7 fortheir smartphones. Relevance of Symbian platform, especially in the mobile appmarket, drops significantly . Market share in sharp decline, notably in the high pricedsmartphone segment

2012: Symbian Belle renamed to Nokia Belle2013: Nokia Belle Feature Pack 2 (latest version)

2014 January: No new applications can bepublished in the Nokia Store

28

[Nokia2013]


29/49

...


29







30/49

...

Embedded LinuxDevices

30


31/49

...

Embedded LinuxOverview

Linux is an Open Source operating system.Only a limited amount of device manufacturerswere offering devices with a pre-installed Linuxsolution (e.g. Motorola, NEC, Panasonic).However, there are several Linux distributions,such as CLinux, that can be installed onexisting devices (e.g. iPAQ).

Motorola, as one of the major mobile phonemanufacturers, was using Linux as (one) of theirOS platforms.

31


32/49

...


32







33/49


34/49

...


34






Windows CE Pocket PC


35/49

...

Windows CE, Pocket PC,Pocket PC Phone Edition, Mobile

Devices

35

Windows CE Pocket PC


36/49

...

Windows CE, Pocket PC,Pocket PC Phone Edition, Mobile

History

[Hpcfactor2010]

36


37/49


38/49

...

Microsoft Windows Phone 7

Launched in October and November2010

Successor to Windows Mobileplatform, but technically a newand different platform withoutbackward compatibility

Aimed at consumer market insteadof enterprise market unlike WindowsMobileNew user interface

38


39/49

...

Microsoft Windows Phone 8

Windows Phone 8 launched inOctober 2012 together withWindows 8 with similar optics

Successor to Windows Phone 7

Latest release: Windows Phone 8

Update 3 (General DistributionRelease GDR3) in October 2013

39


40/49

...


40







41/49


42/49

...


42






h f


43/49

...

Current Threats fromMalware on Mobile OS

Many mobile operating systems allow theexecution of 3 rd-party software:Malware can be executed on mobile operatingsystems, either intentionally or by security leaksinside the mobile operating system (exploits).

Possible threats for the user are:Device malfunctionLoss of data (malware erasing data)Loss of money (e.g. malware sending SMS topremium services )Shorter battery runtime (more processing/resourceusage)

43

Ti li


44/49

...

TimelinePDA/Mobile Threats

Beginnings of Mobile Malware09/2000 : Liberty Horse Trojan12/2000 : Telefonica SMS Mailer08/2001 : Flooder sends unwanted SMS

09/2001 : Phage erases data on Palm devices02/2003 : Nokia V-Card exploit09/2004 : First Symbian OS malware

Strong growth of Mobile MalwareThe number of malware programs masquerading as legitimatemobile apps grew by more than 600 percent in 2012Most popular target: Android

44

[ATD2013]


45/49

...

Security Precautions and Countermeasures

Memory protectionProcesses are not able to access the memory of other processes.

File protectionEncryptionAccess control

Access controlsDefinition of access rights and monitoring of their enforcement.

Support for security modulesSecure I/OCode integrity management: Integrity of programs is checked beforethe are started by e.g.

Checking certificatesProof Carrying CodeAdditional Security Software may be needed, e.g.

Virus scannersFirewalls

45


46/49

...

Access Control

Every user has certain assigned access rights,e.g.

Reading a fileWriting a fileAccessing a peripheral device

The OS controls that users or the processes

started by a user, can only execute thoseactions, which they are allowed to.

46


47/49

...

Access Matrix

F1 F2 F3 Device

sPeriphery

U1 Read Read

U2 Print

U3 Read Execute

U4 ReadWrite

ReadWrite

UserObject

47


48/49


49/49

...

Bibliography

[ATD2013] Juniper Study Finds Mobile Malware Grew 600 Percent, Targets Android Most,

http://allthingsd.com/20130626/juniper-study-finds-mobile-malware-grew-600-percent-targets-android-most/, accessed 2013-11-26.[Canalys07] http://www.canalys.com/pr/2007/r2007024.htm, accessed 2011-09-23[Gartner2013] Gartner Group (2013),Gartner Says Smartphone Sales Grew 46.5 Percent in Second Quarter of 2013 and ExceededFeature Phone Sales for First Time, http://www.gartner.com/newsroom/id/2573415, accessed2013-11-20[Nielsen 2012] Young Adults and Teens Lead Groth Among Smartphone Owners,http://www.nielsen.com/us/en/newswire/2012/young-adults-and-teens-lead-growth-among-smartphone-owners.html, accessed 2013-11-22.[Nielsen 2013] Whos Winning the U.S. Smartphone Market?,http://www.nielsen.com/us/en/newswire/2013/whos-winning-the-u-s-smartphone-market-.html, accessed 2013-11-22[Nokia2013] Nokia Developer News: Changes to supported content types in the Nokia Store,http://developer.nokia.com/Blogs/News/blog/2013/10/04/changes-to-supported-content-types-in-the-nokia-store/, accessed 2013-11-26.

[Gartner2013] http://www.gartner.com/newsroom/id/2573415, accessed 2013-11-22.[Hpcfactor2010] www.hpcfactor.com/support/windowsce, accessed 2011-09-23http://commons.wikimedia.org/wiki/File:Windows_CE_Timeline.png, accessed 2011-09-23.[Symbian2006] symbianblogs.com/history.html, accessed 2011-09-20[WSJ2013] HTC Develops China-Focused Mobile Operating System (28 August 2013),http://online.wsj.com/news/articles/SB10001424127887324463604579040172467657350,accessed 2013-11-26.

p1.l03 2 (49s)mobile os and security aspects examples 20140109

Documents