Tuesday, July 24, 2018

DFP6033 Secure Mobile Computing



Practical Based Exercise 1
QUESTION 1


Symbian OS




i) Features


- Browsing: full web browser support and WAP stack for mobile browsing

Messaging: support SMS, MMS, EMS, POP3, IMAP4, SMTP, Standard attachment and    fax

- Multimedia: shared access to screen, keyboard, font and bitmap, audio recoding and playback, image related functionality

- Communication protocol: TCP, IP vesion 4, IP version 6 USB, Bluetooth

- Mobile Telephony: abstract API for cellular system

Data synchronization: support USB and Bluetooth links. Transfer file and document

Security:  full length encryption and certification management, certificate based  application management

Application environmentwide range of application using C++ and Java


Multi-tasking: multitasking Kernel to support multi-tasking

Robustness: data integrity and accept data from user quickly

Flexible user interface design: easy to use and understand



ii) Development (+ advantage), (- disadvantage)


Java ME

+ Easy memory management
+ Easy to develop
+ Application can be ported to S40 Asha (Nokia’s feature-phone OS)

- Lack of APIs (maps, navigation, UI controls)
- Limited access to hardware
- Needs certification and signing
- Limited subset of Java

Symbian C++

+ Full access to hardware
+ Low memory footprint
+ Good profiling and debugging tools

- Lack of APIs (maps, navigation, UI controls)
- Steep learning curve
- Difficult memory management
- Needs certification and signing

Qt Framework

+ Good set of UI controls
+ Good customization options
+ Fast to develop
+ Application can be deployed for MeeGo with minor changes


- Large memory footprint on older Symbian versions
- Lack of Symbian emulator (although Qt  Simulator can simulate Qt on Symbian)
- The Mobility package can have some bugs


iii) Architecture 


  The Symbian OS System Model contains the following layers:
·         UI Framework Layer
·         Application Services Layer (e.g. Java ME)
·         OS Services Layer
-       Generic OS Services
-       Communication Services
-       Multimedia and Graphics Services
-       Connectivity Services
·         Basic Services Layer
·         Kernel Services and hardware Interface Layer


iv) Security technology/ model

Security Technology- TCB: Core components of platform security- TCE: Protects platform's sensitive API- Capabilities: Privileges to access sensitive APIs- Data Caging: Secure local storage- SIDs & VIDs: Secure ID for software and vendors- Security Boundaries & Policies: Secure IPC- Software Installer: Only allow trusted software

Model
-Trust model: 


v) Version History


References: 







Windows Mobile OS



i) Features

Wallet and Near Field Communication (NFC):  Wallet feature enables user to credit, debit, loyalty and membership card information in one place

- Integrated VoIP apps: VoIP apps with the Windows Phone 8 dialler and contact list. This means user will be able to make VoIP calls right from the People Hub, just like we would  with normal phone call.

- Data storage and syncing: Store all the data in cloud storage and sync email through email

- Shared Windows Core: Phone and computer can be interconnected to transfer file easily

- Multitasking: navigate a file system similar to that of Windows 9x and Windows NT

- Internet Connection Sharing: Connection with the internet and other devices is available in windows mobile os


ii) Development 

Windows C++

+ Full access to hardware
+ Low memory footprint
+ Good profiling and debugging tools

- Steep learning curve
- Difficult memory management
- Needs certification and signing



iii) Architecture


iv) Security technology/ model

- Does not support for removable storage
- No tethered file system access from a PC
- No concept of users ad user login
- Application origin based authentication and authorization

Models
Elements of Windows Phone Security Model
    - Chambers
    - Capabilities