Speeding innovation for industry
Protecting the data transmitted via mobile (smartphone and tablet) platforms can be challenging. Researchers at Leti, a CEA Tech institute, tackled the issue in work conducted under the Mobitrust project, which was established to enhance data security and privacy on tomorrow's mobile platforms.
Specifically, Leti researchers were tasked with structuring and—most importantly—automating the vulnerability analysis of secure environments for the execution of critical applications on mobile platforms. The automation of the process makes the tests reproducible, increases coverage, and limits the number of interventions by specialists with rare skills. The number of tests completed can easily be increased by adding to the library used by the reference platform. The researchers also investigated "secure start" functions—another sensitive area of mobile platforms.
Last but not least, Leti went beyond the security guarantees already offered by secure environments, adding verifications that ensure that implementation recommendations are followed by secure service developers. The Mobitrust project, completed in 2017, resulted in a demonstrator that has since been validated on reference targets.
CEA is a French government-funded technological research organisation in four main areas: low-carbon energies, defense and security, information technologies and health technologies. A prominent player in the European Research Area, it is involved in setting up collaborative projects with many partners around the world.