Publication:
A security framework for mHealth apps on Android platform

Simple item page
dc.citedby73
dc.contributor.authorHussain M.en_US
dc.contributor.authorAl-Haiqi A.en_US
dc.contributor.authorZaidan A.A.en_US
dc.contributor.authorZaidan B.B.en_US
dc.contributor.authorKiah M.en_US
dc.contributor.authorIqbal S.en_US
dc.contributor.authorIqbal S.en_US
dc.contributor.authorAbdulnabi M.en_US
dc.contributor.authorid57189372503en_US
dc.contributor.authorid55886475800en_US
dc.contributor.authorid35070838500en_US
dc.contributor.authorid35070872100en_US
dc.contributor.authorid24833455600en_US
dc.contributor.authorid56719159400en_US
dc.contributor.authorid18437324500en_US
dc.contributor.authorid56453314400en_US
dc.date.accessioned2023-05-29T06:52:03Z
dc.date.available2023-05-29T06:52:03Z
dc.date.issued2018
dc.descriptionAndroid (operating system); Data privacy; Energy utilization; Health risks; mHealth; Android platforms; Android securities; Effectiveness and efficiencies; Experimental evaluation; Mobile applications development; Mobile Health (M-Health); Mobile operating systems; Security; Mobile securityen_US
dc.description.abstractMobile Health (mHealth) applications are readily accessible to the average users of mobile devices, and despite the potential of mHealth applications to improve the availability, affordability and effectiveness of delivering healthcare services, they handle sensitive medical data, and as such, have also the potential to carry substantial risks to the security and privacy of their users. Developers of applications are usually unknown, and users are unaware of how their data are being managed and used. This is combined with the emergence of new threats due to the deficiency in mobile applications development or the design ambiguities of the current mobile operating systems. A number of mobile operating systems are available in the market, but the Android platform has gained the topmost popularity. However, Android security model is short of completely ensuring the privacy and security of users� data, including the data of mHealth applications. Despite the security mechanisms provided by Android such as permissions and sandboxing, mHealth applications are still plagued by serious privacy and security issues. These security issues need to be addressed in order to improve the acceptance of mHealth applications among users and the efficacy of mHealth applications in the healthcare systems. The focus of this research is on the security of mHealth applications, and the main objective is to propose a coherent, practical and efficient framework to improve the security of medical data associated with Android mHealth applications, as well as to protect the privacy of their users. The proposed framework provides its intended protection mainly through a set of security checks and policies that ensure protection against traditional as well as recently published threats to mHealth applications. The design of the framework comprises two layers: a Security Module Layer (SML) that implements the security-check modules, and a System Interface Layer (SIL) that interfaces SML to the Android OS. SML enforces security and privacy policies at different levels of Android platform through SIL. The proposed framework is validated via a prototypic implementation on actual Android devices to show its practicality and evaluate its performance. The framework is evaluated in terms of effectiveness and efficiency. Effectiveness is evaluated by demonstrating the performance of the framework against a selected set of attacks, while efficiency is evaluated by comparing the performance overhead in terms of energy consumption, memory and CPU utilization, with the performance of a mainline, stock version of Android. Results of the experimental evaluations showed that the proposed framework can successfully protect mHealth applications against a wide range of attacks with negligible overhead, so it is both effective and practical. � 2018 Elsevier Ltden_US
dc.description.natureFinalen_US
dc.identifier.doi10.1016/j.cose.2018.02.003
dc.identifier.epage217
dc.identifier.scopus2-s2.0-85044595076
dc.identifier.spage191
dc.identifier.urihttps://www.scopus.com/inward/record.uri?eid=2-s2.0-85044595076&doi=10.1016%2fj.cose.2018.02.003&partnerID=40&md5=31f09d63a47ac6fd605419dd96e87555
dc.identifier.urihttps://irepository.uniten.edu.my/handle/123456789/23814
dc.identifier.volume75
dc.publisherElsevier Ltden_US
dc.sourceScopus
dc.sourcetitleComputers and Security
dc.titleA security framework for mHealth apps on Android platformen_US
dc.typeArticleen_US
dspace.entity.typePublication
Files
Collections
SCOPUS