<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">Talk Title: Run-Time Enforcement of Information-Flow Properties on Android</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">Time: Tuesday, April 23, 2 PM</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">Venue: Room 3-414</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">Abstract:</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">I will talk about improving Android's permission system to prevent</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">confused-deputy attacks and information leakage. Our system permits</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">Android applications to be concisely annotated with information-flow</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">policies by either the programmers or security analysts. We develop a</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">detailed model of our enforcement system using a process calculus, and</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">use the model to prove noninterference. Our system and model have a</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">number of useful or novel features, including support for Android's</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">single- and multiple-instance components, floating labels,</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">declassification and endorsement capabilities, and support for legacy</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">applications. Our system design fits the Android programming model</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">and runtime cleanly enough that we have developed a fully functional</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">prototype on Android 4.0.4. We have tested our prototype on a Nexus S</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">phone, verifying that it can enforce practically useful policies that</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">can be implemented with minimal modification to off-the-shelf</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">applications.</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">Bio: Limin Jia is a Research Systems Scientist at CyLab at Carnegie</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">Mellon University. She received her Ph.D. in Computer Science from</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">Princeton University. Her research interests include programming</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">languages, language-based security, logic, and program</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">verification. At CyLab, Limin's research focuses on formal aspects of</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">security. She is particularly interested in applying language-based</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">security techniques as well as formal logic to model and verify</span><br style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); "><span style="color: rgb(102, 102, 102); font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 25px; text-align: justify; text-indent: 14px; background-color: rgb(255, 255, 255); ">security properties of software systems.</span></body></html>