A Framework for Secure Database and Similarity Comparison in Android
摘要
There is an increase in utilization of mobile devices in today’s time. As a result, there is significant development in mobile technologies. User data stored on mobile devices is not in encrypted format. All the user content can easily be manipulated if any person gets access to the database. Thus, it is necessary to protect user information in the database to shield it from various security threats. The chapter demonstrates a secured database framework that performs encryption and prevents attacks. The proposed system presents an architecture for creating an environment that secures database on the android operating system. The secure database framework manages the generation of keys, implements encryption/decryption on data, and then stores encrypted data in the database. The framework generates a key for data encryption and secures database operations by key decrypted after application authentication. The secure database framework also checks whether the newer application is a renewed version of the old one. Based on the metadata information of the application that is retrieved and compared by the secure database framework to verify the identity of the application by signature verification and similarity comparison. The secure database framework tested for SQL injection and colluding attacks. The SQL injection is prevented by specifying validation items and colluding attack is prevented by detecting similar applications by similarity comparison based on the similarity score. Both attacks are tested on the framework by checking various conditions and parameters.