Denial-of-app attack: Inhibiting the installation of android apps on stock phones

Proceedings of the ACM Conference on Computer and Communications Security

Volumn 2014-November, Issue November, 2014, Pages 21-26

  Arzt, Steven ^a   Huber, Stephan ^b   Rasthofer, Siegfried ^a   Bodden, Eric ^a,b  

^a DARMSTADT UNIVERSITY OF TECHNOLOGY   (Germany)

^b EC SPRIDE   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

ANDROID (OPERATING SYSTEM); COMMERCE; COMPUTER PRIVACY; COMPUTER VIRUSES; INSTALLATION; SMARTPHONES;

ANDROID APPS; ANDROID SECURITIES; ANTI VIRUS; GOOGLE PLAYS; MALWARE DETECTION;

MOBILE SECURITY;

EID: 84937551783     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2666620.2666621     Document Type: Conference Paper

References (24)

1. http://rootwiki.net/.
2. S. Acharya. Samsung Confirms No Android 4.4 KitKat for Galaxy S3 and S3 Mini 3G Versions.
3. A. Apvrille. Playing Hide and Seek with Dalvik Executable. https://www.fortiguard.com/uploads/general/Hidex-Paper.pdf.
4. "Automatic detection of inter-application permission leaks in Android applications". In: IBM Journal of Research and Development (Volume:57, Issue: 6) (2013). http://ieeexplore.ieee.org/xpl/articleDetails.jsp?reload=true&arnumber=6665098.
5. I. Balic. Android Vulnerability affected Google Play Bouncer (Emulator). Blog. http://ibrahimbalic.com/2014/android-vulnerability-affected-google-play-bouncer-emulator/. Mar. 2014.
6. Cert Polsks. A PowerZeus Incident Case Study. Tech. rep. Cert.
7. CVE Details. Website. http://www.cvedetails.com/product/19997/Google-Android.html?vendor-id=1224. June 2014.
8. A. P. Felt et al. \Permission Re-Delegation : Attacks and Defenses". In: SEC'11 Proceedings of the 20th USENIX conference on Security. ACM, 2011. url: https://www.usenix.org/legacy/event/sec11/tech/full-papers/Felt.pdf.
9. J. Forristal. Android: One Root to Own Them All.
10. J. Freeman. http://www.saurik.com/id/19.
11. E. Hamburger. Indie smash hit Flappy Bird racks up 50K per day in ad revenue. http://www.theverge.com/2014/2/5/5383708/flappy-bird-revenue-50-k-per-day-dong-nguyen-interview. Feb. 2014.
12. International Data Corporation. Worldwide Quarterly Mobile Phone Tracker 3Q12. http://www.idc.com/tracker/showproductinfo.jsp?prod\-id=37. Nov. 2012.
13. Lookout Mobile Security. https://blog.lookout.com/blog/2014/04/09/heartbleed-detector/. 2014.
14. A. Moulu. From 0 perm app to INSTALL PACKAGES on Samsung Galaxy S3. http://sh4ka.fr/android/galaxys3/from-0perm-to-INSTALL-PACKAGES-on-galaxy-S3.html 2012.
15. J Oberheide and C Miller. \Dissecting the android bouncer". In: SummerCon2012, New York (2012).
16. Panxiaobo. axml.
17. P. Ratazzi et al. \A Systematic Security Evaluation of Android's Multi-User Framework". In: IEEE Mobile Security Technologies workshop (MoST), 2014.
18. T. Relph-Knight. http://www.h-online.com/security/news/item/Android-holes-allow-secret-installation-of-apps-1134940.html 2010.
19. smali. smali: An assembler/disassembler for Android's dex format. Google Code. https://code.google.com/p/smali/. June 2014.
20. M. Smith. http://www.engadget.com/2012/09/25/dirty-ussd-code-samsung-hack-wipe/. 2012.
21. R. Vallée-Rai et al. \Soot - A Java Bytecode Optimization Framework". In: Proceedings of the 1999 Conference of the Centre for Advanced Studies on Collaborative Research. CASCON '99. Mississauga, Ontario, Canada: IBM Press, 1999, pp. 13. url: http://dl.acm.org/citation.cfm?id=781995.782008.
22. M. de Vries et al. \POPSIS - Pricing Of Public Sector Information Study". In: European Commission Information Society and Media Directorate-General (2011). http://www.epsiplatform.eu/sites/default/files/apps-market.pdf.
23. WugFresh. http://www.wugfresh.com/.
24. W. Zhou et al. \Fast, Scalable Detection of "Piggybacked" Mobile Applications". In: Proceedings of the Third ACM Conference on Data and Application Security and Privacy. CODASPY '13. 2013.