We will demonstrate a prototype of the beyond 3G mobile terminal based on system virtualization technology, which meets both security and flexibility requirements. In the proposed architecture, two domains, secure domain and normal domain, run on top of secure virtual machine monitor (VMM) which includes mandatory access control and domain integrity check mechanisms. Only security critical applications and services (e.g., banking, trading, and DRM) can run on the secure domain, and malware is prohibited from accessing the secure domain. Both flexibility and rich user experiences are provided by allowing users to install and execute application software, which might be potentially vulnerable, on the normal domain. Even in the case of malware attack, it cannot cause security threats to the secure domain because of the isolation and our access control features. This demonstration will show how secure our mobile terminal is against malware attacks compared to conventional single OS based mobile terminal.

Linux is an open source operating system that is rapidly gaining popularity in consumer electronic devices. It has started being deployed in mobile phones and digital audio and video devices. However, with its success in the market, there is a greater need for security. The traditional Discretionary Access Control (DAC) model does not provide adequate security support. Mandatory Access Control (MAC) models can provide additional security in addition to the DAC scheme. However, some of the existing MAC schemes are too complex to be used in embedded devices, while others are simple yet do not provide fine-grained access control. In this paper, we present a MAC model that grants subjects permissions based on their past behavior. It is simple but it also provides a fine-grained access control to the operating system. With its small footprint, it can be applied to various systems, including embedded devices.

Linux is an open source operating system that is rapidly gaining popularity in consumer electronic devices, especially in digital audio and video devices. However, with its success in the market, there is a greater need for security. We present a Trojan attack scenario that compromises the security of a Linux-based networked appliance. Then, we demonstrate how a simple low water-mark mandatory access control (LOMAC) module can protect the system against such attacks. However, LOMAC implements this access control by interposition at the kernel's system call interface and uses implicit attribute mapping to map security attributes to files, which is invasive. We present a LOMAC implementation as a Linux security module (LSM), a new framework for providing standard interfaces to loadable security modules for the Linux kernel.

In this paper, we propose and investigate a new model for robot navigation in large unstructured environments. Current models, which depend on metric information, have to deal with inherent mechanical and sensory errors. Instead we supply the navigator with qualitative information. Our model consists of two parts, a map-maker and a navigator. Given a source and a goal, the mapmaker derives a navigational path based on the topological relationships between landmarks. A navigational path is generated as a combination of “parkway” and “trajectory” paths, both of which are abstractions of the real world into topological data structures. Traversing within a parkway enables the navigator to follow landmarks that are continuously visible. Traversing on a trajectory enables the navigator to move reliably into featureless space, based on local headings formed by visible landmarks that are robust to positional and orientational errors. Reliability measures of parkway and trajectory traversals are defined by appropriate error models that account for the sensory errors of the navigator, the population of neighboring objects, and the rotational and translational errors of the navigator. The optimal path is further abstracted into a “custom map”, which consists of a list of symbolic directional instructions, the vocabulary of which is defined by our environmental description language. Based on the custom map generated by the map-maker, the navigating robot looks for events that are characterized by spatial properties of the environment. The map-maker and the navigator are implemented using two cameras, an IBM 7575 robot arm, and a PIPE (Pipelined Image Processing Engine.)

A purely topological method is explored for navigation in a large unstructured environment that contains featureless objects, using qualitative nonmetric information such as isolated landmarks and trajectories, which are defined. Given a source and a goal, the map-maker constructs a series of verbal directions, called custom map. Based on the custom map, the navigating robot is told to look for events that are characterized by spatial properties of the environment, such as isolated landmarks or distinguishing juxtapositions of landmarks. The result is efficient and reliable navigation that does not depend on detailed numeric information.>