[Paper Review] Security-related Research in Ubiquitous Computing -- Results of a Systematic Literature Review

Ema Kušen, Mark Strembeck|arXiv (Cornell University)|Jan 3, 2017

Advanced Malware Detection Techniques15 references3 citations

TL;DR

This systematic literature review analyzes 5,165 security-related publications (2003–2015) in ubiquitous computing, identifying key threats, vulnerabilities, and defense mechanisms. It reveals that lightweight, context-aware, and adaptive security solutions—particularly for authentication and privacy—are critical due to the dynamic, heterogeneous, and resource-constrained nature of pervasive environments.

ABSTRACT

In an endeavor to reach the vision of ubiquitous computing where users are able to use pervasive services without spatial and temporal constraints, we are witnessing a fast growing number of mobile and sensor-enhanced devices becoming available. However, in order to take full advantage of the numerous benefits offered by novel mobile devices and services, we must address the related security issues. In this paper, we present results of a systematic literature review (SLR) on security-related topics in ubiquitous computing environments. In our study, we found 5165 scientific contributions published between 2003 and 2015. We applied a systematic procedure to identify the threats, vulnerabilities, attacks, as well as corresponding defense mechanisms that are discussed in those publications. While this paper mainly discusses the results of our study, the corresponding SLR protocol which provides all details of the SLR is also publicly available for download.

Motivation & Objective

• To identify and categorize security and privacy threats, vulnerabilities, and attacks in ubiquitous computing environments.
• To analyze the defense mechanisms—especially authentication and privacy-preserving techniques—proposed in the literature.
• To assess the research trends and geographic distribution of contributions in the field of ubiquitous computing security.
• To provide a comprehensive, evidence-based overview of the state of the art in ubiquitous computing security through a systematic literature review (SLR).

Proposed method

• Conducted a systematic literature review (SLR) using predefined research protocols and inclusion/exclusion criteria across five major scientific databases (ACM, IEEE Xplore, ScienceDirect, Springer, Wiley).
• Applied a two-phase filtering process: initial automated search using refined keyword sets, followed by manual screening based on relevance and quality criteria.
• Extracted and synthesized data on threats, vulnerabilities, attacks, and defense mechanisms from 5,109 filtered papers after exclusion.
• Classified defense mechanisms into categories such as authentication, access control, and privacy protection, with quantitative analysis of frequency and type.
• Used a structured protocol to ensure reproducibility and rigor, with full documentation publicly available for transparency.

Experimental results

Research questions

• RQ1 What are the most frequently reported threats and vulnerabilities in ubiquitous computing systems?
• RQ2 Which defense mechanisms—especially in authentication and privacy—are most commonly proposed in the literature?
• RQ3 How have research trends in ubiquitous computing security evolved between 2003 and 2015?
• RQ4 What are the dominant geographic regions contributing to security research in ubiquitous computing?
• RQ5 What are the key challenges in designing lightweight, adaptive, and unobtrusive security solutions for pervasive environments?

Key findings

• A total of 5,165 scientific contributions on security in ubiquitous computing were identified between 2003 and 2015, indicating a substantial and growing research interest.
• The most common defense mechanisms include lightweight authentication protocols (1%), continuous unobtrusive authentication (1%), and speed-optimized handover schemes (1%), reflecting device resource constraints.
• Privacy protection mechanisms were dominated by masking (29%) and security analysis of mobile apps (15%), with proximity detection (13%) and game-based approaches (10%) also prominent.
• The USA, Western Europe, and Eastern Asia were the leading contributors, with the USA showing the highest number of publications among the top 10 countries.
• The study highlights the need for adaptive, context-aware, and lightweight security mechanisms due to the dynamic, heterogeneous, and privacy-sensitive nature of ubiquitous computing environments.
• Despite growing research, challenges remain in protecting sensitive data from attacks such as sensor manipulation and location tracking, especially in wearable and medical devices.