Full Paper

Know Your Enemy: The Risk of Unauthorized Access in Smartphones by Insiders
Ildar Muslukhov, University of British Columbia, Canada
Yazan Boshmaf, University of British Columbia, Canada
Cynthia Kuo, Vibrado Technologies, USA
Jonathan Lester, Nokia Research, USA
Konstantin Beznosov, University of British Columbia, Canada
Time: Thu 11:48 - 12:12 | Session: Security and Privacy | Location: D 209

Smartphones store large amounts of sensitive data, such as SMS messages, photos, or email. In this paper, we report the results of a study investigating users' concerns about unauthorized data access on their smartphones (22 interviewed and 724 surveyed subjects). We found that users are generally concerned about insiders (e.g., friends) accessing their data on smartphones. Furthermore, we present the first evidence that the insider threat is a real problem impacting smartphone users. In particular, 12% of subjects reported a negative experience with unauthorized access. We also found that younger users are at higher risk of experiencing unauthorized access. Based on our results, we propose a stronger adversarial model that incorporates the insider threat. To better reflect users' concerns and risks, a stronger adversarial model must be considered during the design and evaluation of data protection systems and authentication methods for smartphones.

MobileHCI 2013 Proceedings in the ACM Digital Library.

Important Dates

ACM Logo
LMU Logo


Google Logo
Grand Logo
Intel Software Logo
Microsoft Research Logo
Nokia Logo
SMI Logo
Telefonica Logo
Yahoo! Labs Logo