Tizen Security Overview

More documents

Recommendations

Info

Tizen Threat ModelFake / unauthorizedapp storeDistributeunauthorized/malicious appAuthorizedapp storeStandard Linux ThreatsTizen ThreatsDistributeUnauthorized appDownloadunauthorized/Malicious appDownloadmalicious appRegistermalicious appSDKUser/developer(maybe malicious)Modify,unlock,replaceCopy protectedcontentsModify(crack) appGet unauthorizedinformationApplication(maybemalicious)Callunauthorized APIPlatform / resourcesSteal app dataExploitInternetExploitSteal user dataHacker(malicious)Tizen device4tizen.org
High Level Security Principles• No application running under root privilege– Most system daemons currently running under root privilege• Will be minimized soon• No application can interrupt each other– Applications are sandboxed– Also possible to have application family• Important system resources are protected by access controlmechanism– Kernel space objects: DB files, network interface, IPCs, signals, …– User space objects: Make phone call, Send SMS, …• All applications should have least privilege– Each application has different set of privileges5tizen.org
Page 1 and 2: Tizen Security OverviewBumjin Im, R
Page 3: TIZEN SECURITY MODEL3tizen.org
Page 8 and 9: ACCESS CONTROL8tizen.org
Page 10 and 11: Smack Enabled Services• Xorg- X A
Page 12 and 13: User Space Access Control (cont)5.
Page 14 and 15: Manifests• Included as part of pa
Page 16: Conclusion & QA• Tizen Cannot Be

Tizen Security Overview

Create successful ePaper yourself

Delete template?

Save as template?