1. Backup and Recovery for Android Applications Company: Deutsche Telekom Academic advisor: Yuval Elovici Technical advisor: AssafShabtai Project Team: LimorSegev EranFrieman Carmel Karni LimorSegev, EranFrieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

2. Problem Domain An Android OS could be attacked by hackers: • Open platform • Users will access the Internet intensively • Everyone can develop applications for Android (and publish in “The Market”) LimorSegev, EranFrieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

3. Problem Domain – Cont. Successful attack on Androids may: • Expose private information • Prevent T-Mobile customers from using T-Mobile services. • Flood T-Mobile’s customer service infrastructure and personnel. • No easy way exists to “fix” mobile devices and especially Android. Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

4. Problem Domain – Cont. Exposure to Data Loss: • A device may be stolen / lost • Device malfunction • Usage Error Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

5. Current Situation Backup is possible for: • Documents • Media Files • Not for Applications Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

6. The Solution Develop an Application that enables to: - Backup Application files on remote server - Manage DB at server + Allow Security operations. - Recovery of phone last stable status - Added Bonus - Deutsche Telekom will be able to monitor offline users-application and learn about threats. Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

7. System Architecture Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

8. System Architecture – Cont. The System is composed of four major parts: • Web Server • DataBase (MySql) • Android Client • Manager Web-Based Report System Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

9. Web Server • Developed on top of Apache-Tomcat. • Supports multiple connections/requests. • Communicates with clients via Servlets mechanism. • Has an Interface to MySql DB. • Supplies API to an external Threats Detection Application. Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

10. Android Client • Developed using Google’s Android SDK. • Listens to applications-installations events. • Enables Applications backup on a remote Web Server, automatically and on demand. • Enables restoring applications on the device on demand. - Gets updates from the server periodically. - Easy to use, configurable. Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

11. System Manager • Web based User Interface • Enables monitoring the server’s data. • Enables various reports production, such as: • Users Report. • Applications Report. • Users-Applications Report. • Malwares Report. Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

12. www Main Usage Scenario Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

13. UI Samples Android Client Main Configuration Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

14. UI Samples Android Client Backup Restore Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

15. UI Samples Manager Applications Report Users Report Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

16. Technologies Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim

17. Thanks Academic Advisor: Dr. Yuval Elovici Technical Advisor: Mr. AsafShabtai Deutsche Telekom Android Developers Team TA: Boris Rozenberg Head of SE Program: Professor Ehud Gudes SE Program Secretary : Sara Leibovitz Limor Segev, Eran Frieman, Carmel Karni July 2009, www.cs.bgu.ac.il/~segevlim