Mobile device security is becoming increasingly important as the number of devices that are used continues to grow and has surpassed one billion active devices globally. In this thesis, we will investigate the security of Android ad supported apps, security vulnerabilities that have been identified in the way those ads are delivered to the device and improvements that can be made to protect the privacy of the end user. To do this, we will discuss the Android architecture and the ecosystems of apps and ads on those devices. To better understand the threats to mobile devices, a threat analysis will be conducted, investigating the different attack vectors that devices are susceptible to. This will also include a survey of existing work that has been conducted within the realm of Android security and web based exploits. The specific attacks that are detailed in this research are addJavascriptInterface attacks against a WebView used to display an ad and information leakage from the ad URL request. These attack vectors are discussed in detail with applicability and feasibility studies conducted. The results of these attacks will be analyzed with a discussion of the methodology used to obtain them. In order to combat such attacks, there will also be discussion of potential solutions to mitigate the threats of attack from a variety of angles, to include steps that users can take to protect themselves as well as changes that should be made to the Android operating system itself. / Master of Science

As smartphone technology continues to mature, one of the many areas it can help enhance is telemedicine: the concept of using telecommunications to provide health information from a distance. A new medical condition or disease can require frequent visits to the doctor for simple biometric monitoring. These frequent visits are time-consuming and can be extremely inconvenient for the patient. This report describes how a smartphone can be the optimal platform to communicate critical biometric measurements to one's physician, reduce in-person hospital visits, and still allow for the patient to receive feedback from the doctor. A proof-of-concept infrastructure for enabling telemedicine is demonstrated by interfacing a glucose meter with an Android device that uploads that data to the Cloud to be viewed by the doctor. / text

Denna rapport beskriver utvecklandet av en applikation till operativsystemet Android. Här sätts utvecklingen av applikationen i förhållande till god användbarhet och hantering av resurser på en mindre plattform. En server med tillhörande databas kommunicerar med applikationen som klient. De båda utgör tillsammans helheten i ett system designat för bokningsbolaget Current and Able, verksamt i Sverige, som önskar presentera sitt utbud av exklusiva varor och tjänster direkt till fans av bolagets artister.   I projektet avhandlas grundläggande klasser och komponenter för utveckling av applikationer till Android och hur de bäst samverkar för att optimera användandet av resurser. Java användes huvudsakligen som programmeringsspråk. På serversidan utvecklades ett gränssnitt i PHP mot en MySQL databashanterare. / This study describes the development of an application for the operating system Android. We consider the developing of the application in relation to a good user experience and the managing of resources on a smaller device. A server with an appurtenant database communicates with the application as a client. Together they constitute a unity in a system designed to serve Current and Able, a managing and booking music agency in Sweden, who whishes to offer their supply of goods and services to the fans of their related artists.   In this project we deal with basic classes and components regarding development of Android applications and how they interact to achieve the best possible performance when using system resources. Java was the main programming language used. On the server side we developed a graphical user interface in PHP, targeting a MySQL database management system.

Something that has recently gained popularity in the leading car manufacturing companies is the integration of an auto-reverse assistance system to improve the customer experience. The undeniable spread of smartphones and their significant role in human life in recent years, gave rise to the idea of designing an application to be used for reverse driving. As a result, the car company Volvo proposed an idea for this project: to implement an Android based application to facilitate reverse navigation in their trucks. From a technical point of view, the most crucial obstacle that should be addressed is implementing a secure and reliable communication link between the smartphone and the truck's control centre. Hence, the primary goal of this thesis work is to provide a secure channel to transmit data and computing reliability of the com-munication link. Another objective of this project is to define a solution for auto-converting path plan function, currently developed in Matlab, to run on Android devices. In addition, this solution should enable the developer to modify the path plan function in Matlab without having to consider Android programming. The differential method has been proposed for transferring secure data transfer using Bluetooth technol-ogy. This solution not only increases the security of the communication link but also improves transmission time. Another objective has been reached by developing a middleware function using C programming language and Android Native Development Kite (NDK) between An-droid and Matlab. The result of these solutions provides a reliable communication link and runs the developed path plan function in Android phone.

No description available.

Les flux d’information sont des transferts d’information entre les objets d’un environnement donné. À l’échelle du système, pour toute information appartenant à une application donnée, les flux impliquant cette information décrivent comment l’application propage ses données dans le système et l’ensemble de ces flux peut ainsi être considéré comme un profil comportemental de l’application. À cause du nombre croissant d’applications malveillantes, il est devenu nécessaire d’explorer des nouvelles techniques permettant de faciliter voir automatiser l’analyse et la détection de malware. Dans cette thèse, nous proposons ainsi une méthode pour caractériser et détecter les malware Android en nous basant sur les flux d’information qu’ils causent dans le système. Cette méthode repose sur deux autres contributions de la thèse : AndroBlare, la version Android d’un moniteur de flux d’information du nom de Blare, et les graphes de flux système, une structure de donnée représentant de manière compacte et humainement compréhensible les flux d’information observés. Nous avons évalué avec succès notre approche en construisant le profil de 4 malware différents et avons montré que ces profils permettaient de détecter l’exécution d’applications infectées par les malware dont on a un profil. / : Information flows are information exchanges between objects in a given environment. At system level, information flows involving data belonging to a given application describe how this application disseminates its data in the system and can be considered as behaviour based profile of the application. Because of the increasing number of Android malware, there is an urgent need to explore new approaches to analyse and detect Android malware. In this thesis, we thus propose an approach to characterize and detect Android malware based on information flows they cause in the system. This approach leverages two other contributions of the thesis which are AndroBlare, the Android version of an information flow monitor named Blare, and the system flow graph, a data structure to represent in a compact and human readable way the information flows observed by AndroBlare. We successfully evaluated our approach by building the profile of 4 different malware and showed that these profiles permitted to detect the execution of applications infected by malware for which we have computed a profile.

iSmart Taxi är en Android mobilapplikation (app) för taxiförarna på iSmart Taxi AB. Förarna kan med hjälp av denna applikation rapportera deras körningar. Denna applikation har skapats med hjälp av ett REST-API för att interagera med databasen.   Rapporten innehåller beskrivning om hur applikationen skapades och hur återkoppling från testfall som genomfördes av användarna påverkade applikationens design. / iSmart Taxi is a mobile application (app) for taxi drivers at iSmart TaxiAB. The application helps the drivers to register their fares on an Android mobile. A REST-API was build to interact with the database.   The report contains a description of how the application was created and how the feedback from the tests conducted by the users affected application design.

This diploma thesis is focused on implementation of application for security monitoring of network communication of other applications in mobile device with Android platform. Provides users information about security risks that may harm his/her privacy or device. It uses a local VPN to tunnel all data sent to the wireless network. These can be linked to an application that has sent them because the Android kernel is derived from the Linux kernel and can be used to retrieve information about established network connections and the application identifier associated with the connection. This mapping allows to get more information about an app that is potentially dangerous for your mobile device.

Master of Science / Department of Computing and Information Sciences / Mitchell L. Neilsen / Smartphones have become an integral part of everyday life and a study conducted by Kantar World panel ComTech (11/2012 – 02/2013) showed sales of all Android phones outpaced the iPhone by a hefty margin: 52.1 percent to 43.5 percent. Moreover, Android is the OS for most of the mobiles like HTC, Google, Samsung, Sony, Motorola etc. As Steve Jobs said “It’s really hard to design products by focus groups. A lot of times, people don’t know what they want until you show it to them.” There are a lot of common people out there who travel often and book tickets on various websites; i.e., a person like me travels very often and books ticket on a website which provides for the cheapest price. Most of the time the destinations might match and they want to keep track of the websites the tickets are booked, track the dates travelled to a place, track the price and various other details as it gets difficult to remember all details. Moreover, it is hectic to browse through each and every website and check the previous travel. Similarly, if one travels on quite a number of trips via car, one might want to keep track of those details, too. Hence to track all of these, it would be very convenient if there was an application which can take in all details of personal trips so that you can refer back to them whenever you want to do so. MyTripPal is an Android application where a user can save past trips and future trips via flight or car and a user can enter in all details and save trips. For a future trip, users can be reminded via alarm on a date and time he chooses while entering the trip details in the application. Autofill option is given while entering the source and destination where these are prompted from the values that are entered earlier in previous trips. Google maps navigation option is given which provides the route from the source to the destination. The user can also search for the trips and there is an Upcoming Trips tab which lists all future trips via car or flight.

Master of Science / Department of Computing and Information Sciences / Mitchell Neilsen / There has been vast growth in development of mobile applications over the past few years. Many competitors in this area are involved in research and development on new platforms and user experience. One such technology is Android, whose credit goes to the Internet giant Google. Android supports a variety of mobile phones and tablets many manufactured by distinguished companies. These phones are described as next generation mobiles [as described by Google]. Android, being open source and free to use platform, offers the developers a broad way to build different kind of applications. Currently, if a user leaves his/her mobile at home or some other place, there is no option for him/her to see the messages or missed calls until they get back home. To avoid such things, I have built an Android application where we can integrate the mobile phone with SMTP (Simple Mail Transfer Protocol) email system so that the user will get the notification of email or SMS to their email client which is installed on his/her workstation. It will also allow the user to set the profile of the phone as Silent, Ring or Vibrate just by sending messages to the phone. The developed Android software allows users to start the app and give the desired email to which the notifications are to be sent. It will also allow saving the timings during which we need the notifications. The days on which the same notification alert is required can also be mentioned through the app. This will help users to track their mobile by changing its mode to ring just by sending a message.