DroidChameleon: Evaluating Android anti-malware against transformation attacks

ASIA CCS 2013 - Proceedings of the 8th ACM SIGSAC Symposium on Information, Computer and Communications Security

Volumn , Issue , 2013, Pages 329-334

  Rastogi, Vaibhav ^a   Chen, Yan ^a   Jiang, Xuxian ^b  

^a NORTHWESTERN UNIVERSITY   (United States)

^b NORTH CAROLINA STATE UNIVERSITY   (United States)

Author keywords

android; anti malware; malware; mobile

Indexed keywords

ANDROID; ANTI-MALWARE; MALWARE DETECTION; MALWARES; MOBILE; MOBILE MALWARE; SYSTEMATIC FRAMEWORK; TRANSFORMATION TECHNIQUES;

MOBILE DEVICES; ROBOTS; SECURITY OF DATA;

COMPUTER CRIME;

EID: 84878002579     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2484313.2484355     Document Type: Conference Paper

References (30)

1. Android-apktool: A tool for reengineering Android apk files. http://code.google.com/p/android-apktool/.
2. Test: Malware Protection for Android, March 2012. http://www.av-test.org/ en/tests/android/.
3. DroidKungFu. http://www.csc.ncsu.edu/faculty/jiang/DroidKungFu.html.
4. Zelix Klassmaster. http://www.zelix.com/klassmaster/.
5. ProGuard. http://proguard.sourceforge.net/.
6. Smali: An assembler/disassembler for Android's dex format. http://code.google.com/p/smali/.
7. I. Burguera, U. Zurutuza, and S. Nadjm-Tehrani. Crowdroid: behavior-based malware detection system for android. In Proceedings of the 1st ACM workshop on Security and privacy in smartphones and mobile devices, 2011.
8. M. Christodorescu and S. Jha. Testing malware detectors. In Proceedings of the ACM SIGSOFT international symposium on Software testing and analysis, 2004.
9. M. Christodorescu, S. Jha, S. Seshia, D. Song, and R. Bryant. Semantics-aware malware detection. In Security and Privacy, 2005 IEEE Symposium on, 2005.
10. M. Christodorescu, S. Jha, and C. Kruegel. Mining specifications of malicious behavior. In Proceedings of the the 6th ACM ESEC-FSE, 2007.
11. CNET, February 2013. http://news.cnet.com/8301-1035-3-57569402-94/ android-ios-combine-for-91-percent-of-market/.
12. C. Collberg, C. Thomborson, and D. Low. A taxonomy of obfuscating transformations. Technical report, Department of Computer Science, The University of Auckland, New Zealand, 1997.
13. F-Secure. Mobile Threat Report Q3 2012. http://www.f-secure.com/static/ doc/labs-global/Research/Mobile%20Threat%20Report%20Q3%202012.pdf.
14. M. Fredrikson, S. Jha, M. Christodorescu, R. Sailer, and X. Yan. Synthesizing near-optimal malware specifications from suspicious behaviors. In Security and Privacy (SP), 2010 IEEE Symposium on, 2010.
15. M. Grace, Y. Zhou, Q. Zhang, S. Zou, and X. Jiang. Riskranker: scalable and accurate zero-day android malware detection. In Proceedings of the 10th international conference on Mobile systems, applications, and services, MobiSys '12, 2012.
16. L. Harris and B. Miller. Practical analysis of stripped binary code. ACM SIGARCH Computer Architecture News, 33(5):63-68, 2005.
17. C. Kolbitsch, P. Comparetti, C. Kruegel, E. Kirda, X. Zhou, and X. Wang. Effective and efficient malware detection at the end host. In Proceedings of the 18th conference on USENIX security symposium, 2009.
18. H. Lockheimer. Android and security, February 2012. http://googlemobile. blogspot.com/2012/02/android-and-security.html.
19. Lookout. Geinimi Trojan Technical Analysis. http://blog.mylookout.com/ blog/2011/01/07/geinimi-trojan-technical-analysis/.
20. Y. Nadji, J. Giffin, and P. Traynor. Automated remote repair for mobile malware. In Proceedings of the 27th Annual Computer Security Applications Conference, 2011.
21. J. Oberheide. Dissecting android's bouncer, June 2012. https://blog.duosecurity.com/2012/06/dissecting-androids-bouncer/.
22. M. Parkour. Contagio Mobile. Mobile Malware Mini Dump. http://contagiominidump.blogspot.com/.
23. H. Peng, C. Gates, B. Sarma, N. Li, Y. Qi, R. Potharaju, C. Nita-Rotaru, and I. Molloy. Using probabilistic generative models for ranking risks of android apps. In Proceedings of the 2012 ACM conference on Computer and communications security, 2012.
24. V. Rastogi, Y. Chen, and W. Enck. AppsPlayground: Automatic Security Analysis of Smartphone Applications. In Proceedings of ACM CODASPY 2013, February 2013.
25. P. Saxena, R. Sekar, and V. Puranik. Efficient fine-grained binary instrumentationwith applications to taint-tracking. In Proceedings of the 6th annual IEEE/ACM international symposium on Code generation and optimization, 2008.
26. Symantec. Server-side Polymorphic Android Applications. http://www.symantec.com/connect/blogs/server-side-polymorphic-android- applications.
27. R. Whitwam. Circumventing Google's Bouncer, Android's anti-malware system, June 2012. http://www.extremetech.com/computing/130424-circumventing- googles-bouncer-androids-anti-malware-system.
28. M. Zheng, P. Lee, and J. Lui. Adam: An automatic and extensible platform to stress test android anti-virus systems. DIMVA, July 2012.
29. Y. Zhou and X. Jiang. Dissecting android malware: Characterization and evolution. Security and Privacy, IEEE Symposium on, 2012.
30. Y. Zhou, Z. Wang, W. Zhou, and X. Jiang. Hey, you, get off of my market: Detecting malicious apps in official and alternative android markets. In Proceedings of the 19th Network and Distributed System Security Symposium, 2012.