Security and privacy of smartphone messaging applications. Issue 2 (1st June 2015)

• Record Type: Journal Article
• Authors: Matthias Steinbauer, Dr Maria Indrawan-Santiago, Dr Gabriele Anderst-Kotsis, Dr; Mueller, Robin; Schrittwieser, Sebastian; Fruehwirt, Peter; Kieseberg, Peter; Weippl, Edgar
• Is Part Of: International journal of pervasive computing and communications. Volume 11:Issue 2(2015)
• Page Start: 132
• Page End: 150
• Publication Date: 2015-06-01
• Subjects: Ubiquitous computing -- Periodicals; Mobile computing -- Periodicals; Computer network protocols -- Periodicals; Computer network architectures -- Periodicals; Application software -- Development -- Periodicals; 004.6
• DOI: 10.1108/IJPCC-04-2015-0020
• Languages: English
• ISSNs: 1742-7371

Abstract

<abstract> <title> <x content-type="archive" xml:space="preserve">Abstract</x> </title> <sec> <title content-type="abstract-heading">Purpose</title> <p> – This paper aims to give an overview on a number of selected applications in comparison to a previous evaluation conducted two years ago, as well as performing an analysis on several new applications. Mobile messaging and VoIP applications for smartphones have seen a massive surge in popularity, which has also sparked the interest in research related to their security and privacy protection, leading to in-depth analyses of specific applications or vulnerabilities. </p> </sec> <sec> <title content-type="abstract-heading">Design/methodology/approach</title> <p> – The evaluation methods mostly focus on known vulnerabilities in connection with authentication and validation mechanisms but also describe some newly identified attack vectors. </p> </sec> <sec> <title content-type="abstract-heading">Findings</title> <p> – The results show a positive trend for new applications, which are mostly being developed with security and privacy features, whereas some of the older applications have shown little progress or have even introduced new vulnerabilities. In addition, this paper shows privacy implications of smartphone messaging that are not even solved by today's most sophisticated "secure" smartphone messaging applications, as well as discusses methods for protecting user privacy during the creation of the user network. </p> </sec> <sec> <title content-type="abstract-heading">Research limitations/implications</title> <p> – Currently, there is no perfect solution available; thus, further research on this topic needs to be conducted. </p> </sec> <sec> <title content-type="abstract-heading">Originality/value</title> <p> – In addition to conducting a security evaluation of existing applications together with newly designed messengers that were designed with a security background in mind, several methods for protecting user privacy were discussed. Furthermore, some new attack vectors were discussed.</p> </sec> </abstract>