In-memory credentials robbery on android phones

2013 World Congress on Internet Security, WorldCIS 2013

Volumn , Issue , 2013, Pages 88-93

  Stirparo, Pasquale ^a,b   Fovino, Igor Nai ^b   Taddeo, Marco ^c   Kounelis, Ioannis ^a,b  

^a JOINT RESEARCH CENTRE   (Italy)

^b ROYAL INSTITUTE OF TECHNOLOGY   (Sweden)

^c UNIVERSITY OF INSUBRIA   (Italy)

Author keywords

android phone; malware; memory analysis; personal information

Indexed keywords

BEHAVIORAL RESEARCH; CELLULAR TELEPHONES; COMPUTER CRIME; INTERNET; MOBILE COMPUTING; MOBILE PHONES; ROBOTS; TELEPHONE SETS;

ANDROID PHONE; MALWARES; MEMORY ANALYSIS; MOBILE APPLICATIONS; MOBILE-PHONE USERS; PERSONAL INFORMATION; SENSITIVE INFORMATIONS; TRADITIONAL COMPUTERS;

SECURITY OF DATA;

EID: 84898488938     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/WorldCIS.2013.6751023     Document Type: Conference Paper

References (19)

1. P. Stirparo and I. Kounelis, "The mobileak project: Forensics methodology for mobile application privacy assessment," in Internet Technology And Secured Transactions, 2012 International Conferece For. IEEE, Dec. 2012, pp. 297-303.
2. J. Jamaluddin, N. Zotou, R. Edwards, and P. Coulton, "Mobile phone vulnerabilities: a new generation of malware," in Consumer Electronics, 2004 IEEE International Symposium on, 2004, pp. 199-202.
3. S. Tyssy and M. Helenius, "About malicious software in smartphones," Journal in Computer Virology, vol. 2, no. 2, pp. 109-119, 2006. [Online]. Available: http://dx.doi.org/10.1007/s11416-006-0022-0
4. A. P. Felt, M. Finifter, E. Chin, S. Hanna, and D. Wagner, "A survey of mobile malware in the wild," in Proceedings of the 1st ACM workshop on Security and privacy in smartphones and mobile devices, ser. SPSM '11. New York, NY, USA: ACM, 2011, pp. 3-14. [Online]. Available: http://doi.acm.org/10.1145/ 2046614.2046618
5. T. Vidas, D. Votipka, and N. Christin, "All your droid are belong to us: A survey of current android attacks," in Proceedings of the 5th USENIX Workshop on Offensive Technologies (WOOT'11), San Francisco, CA, Aug. 2011.
6. M. Zalweski, "Memfetch homepage," http://freecode.com/projects/ memfetch.
7. A. Case, A. Cristina, L. Marziale, G. G. Richard, and V. Roussev, "Face: Automated digital evidence discovery and correlation," Digital Investigation, vol. 5, Supplement, no. 0, pp. S65-S75, 2008, the Proceedings of the Eighth Annual DFRWS Conference. [Online]. Available: http://www. sciencedirect.com/science/article/pii/S1742287608000340
8. A. Case, L. Marziale, C. Neckar, and G. G. Richard III, "Treasure and tragedy in kmem cache mining for live forensics investigation," Digital Investigation, vol. 7, Supplement, no. 0, pp. S41-S47, 2010, the Proceedings of the Tenth Annual DFRWS Conference. [Online]. Available: http://www. sciencedirect.com/science/article/pii/S1742287610000332
9. A. Case, L. Marziale, and G. G. Richard III, "Dynamic recreation of kernel data structures for live forensics," Digital Investigation, vol. 7, Supplement, no. 0, pp. S32-S40, 2010, the Proceedings of the Tenth Annual DFRWS Conference. [Online]. Available: http://www.sciencedirect.com/science/article/ pii/S1742287610000320
10. I. Kolĺar, "Forensic ram dump image analyser," Master's thesis, Department of Software Engineering, Charles University, Prague, 2010.
11. V. L. Thing, K.-Y. Ng, and E.-C. Chang, "Live memory forensics of mobile phones," digital investigation, vol. 7, pp. S74-S82, 2010.
12. J. Sylve, A. Case, L. Marziale, and G. G. Richard, "Acquisition and analysis of volatile memory from android devices," Digital Investigation, vol. 8, no. 3, pp. 175-184, 2012.
13. Volatile System, "The volatility framework: Volatile memory artifact extraction utility framework," https://www.volatilesystems.com/default/ volatility, access date: 10/07/2013.
14. "The volatility framework," https://code.google.com/p/ volatility/, access date: 10/07/2013.
15. S. Leppert, "Android memory dump analysis," Student Research Paper, Chair of Computer Science, vol. 1, 2012.
16. H. Macht, "Live memory forensics on android with volatility," Master's thesis, Friedrich-Alexander University Erlangen-Nuremberg, January 2013.
17. "Processes and threads," http://developer.android.com/guide/ components /processes-and-threads.html, access date: 10/07/2013.
18. "c4droid homepage on google play website," https://play.google. com/store/apps/details?id=com.n0n3m4.droidc&hl=it, access date: 10/07/2013.
19. "Antutu benchmark," https://play.google.com/store/apps/details? id=com.an tutu.ABenchMark&hl=it, access date: 10/07/2013.