BEGIN:VCALENDAR VERSION:2.0 PRODID:researchseminars.org CALSCALE:GREGORIAN X-WR-CALNAME:researchseminars.org BEGIN:VEVENT SUMMARY:Jorge Blasco Alis (Royal Holloway University of London) DTSTART:20210630T140000Z DTEND:20210630T150000Z DTSTAMP:20260423T021343Z UID:UK-SPS/3 DESCRIPTION:Title: I nformation-Flow Analysis for Mobile and Wearable Device Security and Priva cy\nby Jorge Blasco Alis (Royal Holloway University of London) as part of UK Security and Privacy Seminar Series\n\n\nAbstract\nInformation flow analysis techniques have been widely applied to the analysis of mobile ap plications. In this talk we will explore how they can be used to study the security and privacy properties in mobile-to-IoT and wearable device inte ractions. For this\, we separate the interaction methods in two main categ ories: those enabled by the operating system in the form of proprietary AP Is (Android Wear) and those that are done directly at a lower level using wireless protocols such as Bluetooth Low Energy. We show how we can instru ment Google Play APIs to perform information flow analysis over Android We ar API calls. With this\, we can identify what information is being exchan ged between the mobile application and its wearable counterpart\, being ab le to reason about possible privacy leakages. When looking at lower level interactions\, we analyse how Android implements its Bluetooth Low Energy stack and identify an issue that would allow any application with Bluetoot h permissions to access any BLE connected device without the users’ cons ent. We measure how many BLE-enabled apps are affected by this and provide mitigation recommendations to stakeholders in the BLE ecosystem.\n LOCATION:https://researchseminars.org/talk/UK-SPS/3/ END:VEVENT END:VCALENDAR