Backup and Recovery for Android Applications

Company: Deutsche Telekom Academic advisor: Yuval Elovici Technical advisor: Assaf Shabtai

Project Team: Limor SegevEran FriemanCarmel Karni

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

Problem Domain

An Android OS could be attacked by hackers:– Open platform– Users will access the Internet intensively– Everyone can develop applications for

Android (and publish in “The Market”)

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

Successful attack on Androids may:– Expose private information – Prevent T-Mobile customers from using T-Mobile services.– Flood T-Mobile’s customer service infrastructure

and personnel.– No easy way exists to “fix” mobile devices

and especially Android.

Problem Domain – Cont.

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

Exposure to Data Loss:– A device may be stolen / lost– Device malfunction– Usage Error

Problem Domain – Cont.

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

Backup is possible for:- Documents- Media Files- Not for Applications

Current Situation

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

Develop an Application that enables to: - Backup Application files on remote server- Manage DB at server + Allow Security operations.- Recovery of phone last stable status- Added Bonus - Deutsche Telekom will be able to monitor offline users-application and learn about threats.

The Solution

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

System Architecture

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

System Architecture – Cont.

The System is composed of four major parts:- Web Server- DataBase (MySql)- Android Client- Manager Web-Based Report System

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

Web Server- Developed on top of Apache-Tomcat.- Supports multiple connections/requests.- Communicates with clients via Servlets

mechanism.- Has an Interface to MySql DB.- Supplies API to an external Threats Detection

Application.

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

- Developed using Google’s Android SDK.- Listens to applications-installations events.- Enables Applications backup on a remote

Web Server, automatically and on demand.- Enables restoring applications on the device

on demand.- Gets updates from the server periodically.- Easy to use, configurable.

Android Client

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

- Web based User Interface- Enables monitoring the server’s data.- Enables various reports production, such as:

o Users Report.o Applications Report.o Users-Applications Report. o Malwares Report.

System Manager

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

Main Usage Scenario

www

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

Android ClientUI Samples

Main Configuration

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

Android ClientUI Samples

Backup Restore

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

ManagerUI Samples

Applications Report Users Report

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

Technologies

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

ThanksAcademic Advisor: Dr. Yuval EloviciTechnical Advisor: Mr. Asaf ShabtaiDeutsche Telekom Android Developers Team

TA: Boris Rozenberg Head of SE Program: Professor Ehud GudesSE Program Secretary : Sara Leibovitz

Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim