Process Level Security for Mobile System Assurance

ABSTRACT: Given NSAs MCP requirements for no data at rest, VMI will prove critical to enabling access to mobile apps on classified networks, and VMI can also enable working from personally owned end points under teleworking policies. Desktop thin client technology is already employed by the AF on both classified and unclassified networks a mobile equivalent is the natural next step. SEAndroid policy integration will help to ensure the integrity of these remote mobile application environments. We will develop a working system leveraging Security Enhanced Android in a VMI platform to demonstrate a flexible and extensible model for process level separation. The work shall be integrated into Hyporis Commercial Off The Shelf (COTS) product, its Android Cloud Environment (ACE) platform. A lab bench demonstration shall signify meeting this objective and completion (finished). VMI solves the problem of enabling mobile apps in highly secure environments, such as classified networks, ensuring compliance with NSAs Mobility Capability Package (MCP) thin client architecture. This project addresses the security problem of running different sets of mobile apps with robust separation between the sets. Hypori will assure the proper handling of information from cradle to grave by leveraging process level virtualization throughout the information life cycle.; BENEFIT: This solution will allow process level separation in Android, enabling communities of interest to leverage compartments to have different data sets accessible from a single OS. The project will also provide more fine grained access controls for apps interacting with sensors in the operating system, dealing with apps that request unnecessarily broad sensor access rights. The technology will be integrated into the commercial software platform from Hypori (formerly DroidCloud), and will be made available to all is customers across the US government and commercial sectors.