Arquitectura de la red 3G – UMTS

Table 1. Key terms

Academic attack model, app behavior, authentication, behavior, forensics, human factors, information management, loss prevention, management, open source, platform, social learning, statistics , usability, vulnerabilities Best Practices awareness, defense, security, tips, users,

Consumer anti-virus, app, user, tips, personal, protection safe, security analysis, trust

Corporate breach, byod, data security, ecosystem, integrity, loss prevention, management, market, mobile device management, projection, risk, severity, training, loss prevention, statistics, zero-day

Government byod, guidelines, loss prevention, policy, protocol How-to design, learning, research, threat detection, tips, tools Magazine/media breach, hacker, report, vulnerabilities zero-day

Review analysis, app, development, product, testing, threat modeling, tutorial, system

Table 2. Databases

General databases Domain specific databases

Google Scholar Web of Science

Ebsco host ACM Digital Library

Academic Search Premier IEEE Xplore

ERIC ScienceDirect

Table 3. Query Combinations

mobile AND security smartphone AND security mobile AND attack

mobile OR smartphone

AND security

smartphone AND privacy mobile AND risk

smartphone AND threats smartphone OR mobile

AND Threats

mobile OR smartphone

AND risk OR attack

smartphone AND threats

OR virus

smartphone AND attack mobile AND protection

Smartphone AND risk Smartphone AND attack mobile OR smartphone

7. References/works cited

Allam, S., Flowerday, S., & Flowerday, E. (2014). Smartphone information security awareness: A victim of operational pressures. Computers & Security, 42, 56-65. Retrieved November 28, 2015, from ScienceDirect.

Amrutkar, C., Traynor, P., & Oorschot, P. (2014). An Empirical Evaluation of Security Indicators in Mobile Web Browsers. IEEE Transactions on Mobile Computing IEEE Trans. on Mobile Comput., 14(5), 889-903. Retrieved October 28, 2015, from IEEE Computer Society.

Androulidakis, I., & Kandus, G. (2011). Ramifications of mobile phone advanced O/S on security perceptions and practices. 2011 Third International Workshop on

Cyberspace Safety and Security (CSS), 33-38. Retrieved October 29, 2015. Annual Report 2011. (2011). Cisco. Retrieved from

https://www.cisco.com/assets/cdc_content_elements/docs/annualreports/media/20 11-ar.pdf

Ban, E. (2015, July 10). Mobile Application Security: Soon Enough, Hackers’ Attack Vector of Choice. Bitdefender. Retrieved October 13, 2015.

Beach, A., Gartrell, M., & Han, R. (2009). Solutions to Security and Privacy Issues in Mobile Social Networking. 2009 International Conference on Computational Science and Engineering, 4. Retrieved October 25, 2015, from IEEE Xplore. Becher, M., Freiling, F., Hoffmann, J., Holz, T., Uellenbeck, S., & Wolf, C. (2011).

Mobile Security Catching Up? Revealing the Nuts and Bolts of the Security of Mobile Devices. 2011 IEEE Symposium on Security and Privacy. Retrieved November 29, 2015, from IEEE Xplore

Bohyun, K. (2014). Mobile Consumer Behavior: Myths and Realities. Library

Technology Reports, 49(6), 9–14, Retrieved on September 12, 2015, from ALA Tech Source

Chin, E., Felt, A., Sekar, V., & Wagner, D. (2012). Measuring user confidence in smartphone security and privacy. Proceedings of the Eighth Symposium on Usable Privacy and Security - SOUPS '12, 12(1). Retrieved October 13, 2015, from ACM Digital Library.

Coture, E. (2010). Mobile Security: Current threats and emerging protective measures. Sans Institute Reading Room. Retrieved July 10, 2015, from Sans Institute Website

Damopoulos, D., Kambourakis, G., Anagnostopoulos, M., Gritzalis, S., & Park, J. (2012). User privacy and modern mobile services: Are they on the same path? Personal and Ubiquitous Computing, 17(4), 1437-1448. Retrieved October 18, 2015 Dezfouli, F., Dehghantanha, A., Mahmod, R., Sani, N., & Shamsuddin, S. (2013). A

Data-centric Model for Smartphone Security. International Journal of

Advancements in Computing Technology IJACT, 5(9), 9-17. Retrieved November 29, 2015, from EbscoHost.

Dharmdasani, H. (2014, September 3). We Steal SMS: An insight into

Android.KorBanker Operations Threat Research. Retrieved November 29, 2015, from https://www.fireeye.com/blog/threat-research/2014/09/we-steal-sms-an-

insight-into-android-korbanker-operations.html.

Enterprise Mobile Threat Report 2015. (2015). Retrieved September 27, 2015, from http://info.appthority.com/hubfs/website-LEARN-content/Appthority-Mobile- Threat-Report-Q12015.pdf

Farrell, S., & Nielsen, J. (2014). User Experience Careers, 194. Retrieved from

http://s3.amazonaws.com/media.nngroup.com/media/reports/free/User_Experienc e_Careers.pdf

Feizollah, A., Anuar, N., Salleh, R., & Wahab, A. (2013). A review on feature selection in mobile malware detection. Digital Investigation, 13, 22-37. Retrieved August

20, 2015 , from Google Scholar.FireEye, “Out of Pocket: A Comprehensive Mobile Threat Assessment of 7 million iOS and Android Apps” February 2015

Fischer, I. T., Kuo, C., Huang, L., & Frank, M. (2012). Short Paper: Smartphones: Not Smart Enough?Association , 27–32. Retrieved September 5, 2015, from ACM Digital Library.

Friedman, J., & Hoffman, D. V. (2008). Protecting data on mobile devices: A taxonomy of security threats to mobile computing and review of applicable defenses. Information Knowledge Systems Management, 7(1/2), 159-180. Retrieved October 5, 2015, from ACM Digital Library.

General Services Administration. United States. Dept. of Health and Human Services. (2006). Research-based web design & usability guidelines. Version 2.

Washington, D.C.: U.S. Dept. of Health and Human Services.

Google. (2014). Android Security 2014 Year in Review Table of Contents.

Grzonkowski, S., Mosquera, A., Aouad, L., & Morss, D. (n.d.). Smartphone Security: An overview of emerging threats. IEEE Consumer Electron. Mag. IEEE Consumer Electronics Magazine, 3(4), 40-44.

Han, Bo; Yu Wu,; John Windsor,. "User's Adoption of Free Third-Party Security

Apps." The Journal of Computer Information Systems. International Association for Computer Information Systems. 2014.

Harris, Mark A., Karen Patten, and Elizabeth Regan. "The need for byod mobile device security awareness and training." (2013). Retrieved September 5, 2015, from AIS Electronic Library.

He, D., Chan, S., & Guizani, M. (2015). Mobile application security: malware threats and defenses. Wireless Communications, IEEE, 22(1), 138-144. Retrieved October 13, 2015, from IEEE Xplore

He, D., Chan, S., & Guizani, M. (2015). User privacy and data trustworthiness in mobile crowd sensing. IEEE Wireless Communications, 22(1), 28-34. Retrieved October 13, 2015, from IEEE Xplore.

Hettig, M., Kiss, E., Kassel, J. F., Weber, S., Harbach, M., & Smith, M. (2013, July). Visualizing Risk by Example: Demonstrating Threats Arising From Android Apps. In Symposium on Usable Privacy and Security (SOUPS). Retrieved August 15, 2015, from Carnegie Mellon University.

Hu, B., Eds, A. E., & Hutchison, D. (2012). LNCS 7719 – Pervasive Computing and the Networked World. Retrieved September 5, 2015, from Springer Link.

Husted, N., Saïdi, H., & Gehani, A. (2011). Smartphone security limitations. Proceedings of the 2011 Workshop on Governance of Technology, Information, and Policies - GTIP '11. Retrieved October 14, 2015, from ACM Digital Library.

Imgraben, J., Engelbrecht, A., & Choo, K. (2014). Always connected, but are smart mobile users getting more security savvy? A survey of smart mobile device users. Behaviour & Information Technology, 33(12), 1347-1360. Retrieved August 18, 2015 From ACM Digital Library.

IOS Security iOS 9.0 and Later. (2015, September 1). Retrieved November 29, 2015, from http://www.apple.com/business/docs/iOS_Security_Guide.pdf

Jain, A., & Shanbhag, D. (2012). Addressing Security and Privacy Risks in Mobile Applications. IT Professional IT Prof., 14(5), 28-33. Retrieved November 29, 2015, from IEEE Xplore. Retrieved July 5, 2015, From IEE Xplore.

Kataria, A., Anjali, T., & Venkat, R. (2014). Quantifying Smartphone Vulnerabilities, 645–649. Retrieved July 5, 2015 From IEEE Xplore.

King, N. J., & Jessen, P. W. (2010). Profiling the mobile customer – Is industry self- regulation adequate to protect consumer privacy when behavioral advertisers target mobile phones? – Part II. Computer Law and Security Review, 26(6), 595– 612. Retrieved September 5, 2015 From Science Daily.

Landman, M. (2010). Managing smart phone security risks. 2010 Information Security Curriculum Development Conference on – InfoSecCD ’10, 145. Retrieved August 15, 2015, From ACM Digital Library.

La Polla, M., Martinelli, F., & Sgandurra, D. (2013). A Survey on Security for Mobile Devices. IEEE Communications Surveys & Tutorials, 15(1), 446-471. Retrieved August 24, 2015, From IEE Xplore.

Leavitt, N. (2005). Mobile phones: The next frontier for hackers? Computer, 38(4), 20– 23. Retrieved July 1, 2015 From IEEE Xplore.

Leavitt N.(2000), “Malicious Code Moves to Mobile Devices,” IEEE Computer, 33(12)

Lemos, R. (2015, September 1). Pre-Installed Android Malware Raises Security Risks in Supply Chain. EWeek. Retrieved October 15, 2015

Li, X., Ren, S., Cheng, W., Xiang, L., & Liu, X. (2014). Smartphone: Security and

Privacy Protection. Pervasive Computing and the Networked World Lecture Notes in Computer Science, 289-302. Retrieved July 30, 2015, From Springer Link. Lin, J. (2013). Understanding and Capturing People’s Mobile App Privacy Preferences.

(No. CMU-CS-13-27) Carnegie Mellon University Pittsburgh PA School of Computer Science. Retrieved July 15, 2015, from Google Scholar.

Mahinthan Chandramohan, Hee Beng Kuan Tan. (2012). Detection of Mobile Malware in the Wild. Computer, 45(9), 65-71. Retrieved August 1, 2015, from IEEE Xplore.

Malware Attacks on Android? How to prevent them. (n.d.). Retrieved October 8, 2015, from http://www.combofix.org/malware-attacks-on-android-how-to-prevent- them.php

McDaniel, P., & Enck, W. (2010). Not So Great Expectations: Why Application Markets Haven’t Failed Security. Security and Privacy, IEEE, 8(5), 76–78. Retrieved October 5, 2015, from IEEE Xplore.

Mobile privacy: A better practice guide for mobile app developers. (2014, September 1). Retrieved November 29, 2015, from

http://www.oaic.gov.au/images/documents/privacy/privacy-resources/privacy- guides/mobile-apps-guide.pdf

Mylonas, A., Kastania, A., & Gritzalis, D. (2013). Delegate the smartphone user? Security awareness in smartphone platforms. Computers & Security, 24, 47-66. Retrieved October 1, 2015, From IEE Xplore.

Oh, T., Stackpole, B., Cummins, E., Gonzalez, C., Ramachandran, R., & Lim, S. (2012). Best security practices for android, blackberry, and iOS. The First IEEE

Workshop on Enabling Technologies for Smartphone and Internet of Things (ETSIoT), 42-47. Retrieved October 1, 2015.

Park, J., Yi, K., & Jeong, Y. (2014). An enhanced smartphone security model based on information security management system (ISMS). Electronic Commerce Research Electron Commer Res, 321-348. Retrieved November 1, 2015, from Springer Link.

Paullet, K., & Pinchot, J. (2014). Mobile Malware: Coming to a Smartphone Near You? Issues in Information Systems, 15(2). Retrieved October 20, 2015, from

EBSCOhost.

Peng, S., Yu, S., & Yang, A. (2014). Smartphone malware and its propagation modeling: A survey. IEEE Communications Surveys and Tutorials, 16(2), 925–941.

Retrieved October 5, 2015, from IEEE Xplore.

Penning, N., Hoffman, M., Nikolai, J., & Wang, Y. (2014). Mobile malware security challenges and cloud-based detection. 2014 International Conference on Collaboration Technologies and Systems (CTS). Retrieved October 16, 2015, from IEEE Xplore.

Ruggiero, P., & Foote, J. (2011). Cyber Threats to Mobile Phones. Us-Cert, 1–6.

Security News This Week: Be Careful With Your Apple Watch and Starbucks App. (2015, May 16). Wired. Retrieved May 1, 2015.

Shahandashti, S. F., Safavi-Naini, R., & Safa, N. A. (2015). Reconciling User Privacy and Implicit Authentication for Mobile Devices. Computers & Security, 53, 215– 233. Retrieved July 10, 2015, from IEE Xplore

Shahani, A. (2015, July 29). Major Flaw In Android Phones Would Let Hackers In With Just A Text. Retrieved November 1, 2015, from

http://www.npr.org/sections/alltechconsidered/2015/07/27/426613020/major- flaw-in-android-phones-would-let-hackers-in-with-just-a-text .

Siddiqui, A. T., Wahid, A., & Ph, D. (2014). Mobile OS Security and Threats : A Critical Review, International Journal of Computer Applications , 86(9), 8–13. Retrieved November 1, 2015, from research.ijcaonline.org.

Simon, L., & Anderson, R. (n.d.). Security Analysis of Consumer-Grade Anti-Theft Solutions Provided by Android Mobile Anti-Virus Apps. Retrieved November 1, 2015, from ieee-security.org.

James, Lyne. “Security Threat Trends 2015” Retrieved October 1, 2015, From Sophos.com.

Stavrou, A., Voas, J., Karygiannis, T., & Quirolgico, S. (2012). Building Security into Off-the-Shelf Smartphones. Computer, 45(2), 82–84. Retrieved October 1, 2015, from from IEEE Xplore.

The New Era of Mobile Malware: 4 Steps to Reduce Your Risk. (2014, March 6). Retrieved September 29, 2015, from http://intelligent-

defense.softwareadvice.com/4-steps-to-reduce-mobile-malware-risk-0314/.

The Ten Most Critical Wireless and Mobile Security Vulnerabilities. (2006, June 29). Retrieved November 29, 2015, from http://www.net-

security.org/article.php?id=927&p=2

Titcomb, J. (2015, August 6). Android security breach puts millions at risk of smartphone hijacking. Retrieved September 23, 2015, from

http://www.telegraph.co.uk/technology/internet-security/11788184/Android- security-breach-puts-millions-at-risk-of-smartphone-hijacking.html .

Tu, Z., Turel, O., Yuan, Y., & Archer, N. (2015). Learning to cope with information security risks regarding mobile device loss or theft: An empirical examination.

Information & Management, 52(4), 506–517. Retrieved October 13, 2015, from ScienceDirect.

2015 Data Breach Investigations Report (DBIR). (2015). Retrieved November 29, 2015, from http://www.verizonenterprise.com/DBIR/2015/

Xiao, C. (2015, August 30). Keyraider: IOS Malware Steals Over 225,000 Apple Accounts to Create Free App Utopia. Retrieved September 15, 2015.

Xiao, L., Yan, Q., Lou, W., Chen, G., & Hou, Y. T. (2013). Proximity-based security techniques for mobile users in wireless networks. IEEE Transactions of Information Forensics and Security, 8(12), 2089–2100. Retrieved October 5, 2015, from IEEE Xplore.

Xing, L., Bai, X., Li, T., Wang, X., Liao, X., & Chen, K. (2015). Unauthorized Cross- App Resource Access on MAC OS X and iOS. Retrieved October 1, 2015, from Cornell University Library website.

Wang, Y., Streff, K., & Raman, S. (2012). Smartphone security challenges. Computer, 45(12), 52–58. Retrieved October 15, 2015, from IEEE Xplore.

Watkins, J. (2014). Outmaneuvering Cyber adversaries using Commercial Technologies Journal of Information. Journal of Information Warfare (JIW), 13(2). 76-86. Retrieved October 10, 2015, from nsa.gov.

We Live Security. (2015). “11 Security Mistakes You Probably Keep Making.” From http://www.welivesecurity.com/2015/07/22/11-security-mistakes/.

Wu, L., Du, X., & Fu, X. (2014). Security threats to mobile multimedia applications: Camera-based attacks on mobile phones. IEEE Communications Magazine, 52(3), 80-87. Retrieved September 16, 2015, From IEEE Xplore.

Wu, F., Narang, H., & Clarke, D. (2014). An Overview of Mobile Malware and

Solutions. JCC Journal of Computer and Communications, 2(12), 8-17. Retrieved October 15, 2015, From Scientific Research.

You, W., Qian, K., Lo, D., Bhattacharya, P., Chen, W., Rogers, T., . . . Yao, J. (2015). Promoting mobile computing and security learning using mobile devices. 2015 IEEE Integrated STEM Education Conference, 205-209. Retrieved October 15, 2015, from IEEE Xplore.

Zonouz, S., Houmansadr, A., Berthier, R., Borisov, N., & Sanders, W. (2013). Secloud: A cloud-based comprehensive and lightweight security solution for smartphones. Computers & Security, 37, 215-227. Retrieved October 15, 2015, from