AsDroid: Detecting stealthy behaviors in Android applications by user interface and program behavior contradiction

Proceedings - International Conference on Software Engineering

Volumn , Issue 1, 2014, Pages 1036-1046

  Huang, Jianjun ^a   Zhang, Xiangyu ^a   Tan, Lin ^b   Wang, Peng ^c   Liang, Bin ^c  

^a PURDUE UNIVERSITY   (United States)

^b UNIVERSITY OF WATERLOO   (Canada)

^c RENMIN UNIVERSITY OF CHINA   (China)

Author keywords

Android; Program Behavior Contradiction; Stealthy Behaviors; User Interface

Indexed keywords

ANDROID (OPERATING SYSTEM); APPLICATION PROGRAMS; BEHAVIORAL RESEARCH; MALWARE; SEMANTICS; SOFTWARE ENGINEERING;

ANDROID; ANDROID APPLICATIONS; PROGRAM BEHAVIOR; SEMANTIC MISMATCHES; STATIC PROGRAM ANALYSIS; STEALTHY BEHAVIORS; USER INTERACTION; USER INTERFACE COMPONENTS;

USER INTERFACES;

EID: 84994129817     PISSN: 02705257     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2568225.2568301     Document Type: Conference Paper

References (35)

1. Contagio mobile malware mini dump. http: //contagiominidump. blogspot. com/.
2. Google play market. https: //play. google. com/store/apps/.
3. Money-stealing apps are hosting in the mobile devices. http: //-nance. sina. com. cn/money/lczx/20120410/0703 11783396. shtml.
4. Wandoujia. http: //www. wandoujia. com/apps/.
5. A. V. Aho, M. S. Lam, R. Sethi, and J. D. Ullman. Compilers: Principles, Techniques, and Tools (2nd Edition). Pearson Education, Inc., 2006.
6. S. Arzt, K. Falzon, A. Follner, S. Rasthofer, E. Bodden, and V. Stolz. How useful are existing monitoring languages for securing Android apps In ATPS'13.
7. M. Becher, F. C. Freiling, J. Homann, T. Holz, S. Uellenbeck, and C. Wolf. Mobile security catching up revealing the nuts and bolts of the security of mobile devices. In S&P'11.
8. T. H. Cormen, C. E. Leiserson, R. L. Rivest, and C. Stein. Introduction to Algorithms, Third Edition. The MIT Press, 2009.
9. K. Elish, D. D. Yao, and B. G. Ryder. User-centric dependence analysis for identifying malicious mobile apps. In MoST'12.
10. W. Enck, P. Gilbert, B.-G. Chun, L. P. Cox, J. Jung, P. McDaniel, and A. N. Sheth. Taintdroid: an information-ow tracking system for realtime privacy monitoring on smartphones. In OSDI'10.
11. W. Enck, D. Octeau, P. McDaniel, and S. Chaudhuri. A study of Android application security. In USENIX Security'11.
12. A. P. Felt, M. Finifter, E. Chin, S. Hanna, and D. Wagner. A survey of mobile malware in the wild. In SPSM'11.
13. C. Fritz, S. Arzt, S. Rasthofer, E. Bodden, A. Bartel, J. Klein, Y. le Traon, D. Octeau, and P. McDaniel. Highly precise taint analysis for Android applications. Technical report, TU Darmstadt, 2013.
14. Gartner. Gartner says worldwide sales of mobile phones declined 3 percent in third quarter of 2012; smartphone sales increased 47 percent. http: //www. gartner. com/it/page. jspid=2237315.
15. C. Gibler, J. Crussell, J. Erickson, and H. Chen. AndroidLeaks: automatically detecting potential privacy leaks in Android applications on a large scale. In TRUST'12.
16. P. Gilbert, B.-G. Chun, L. P. Cox, and J. Jung. Vision: automated security validation of mobile apps at app markets. In MCS'11.
17. Google. Android 4. 2 compatibility de-nition. http: //source. android. com/compatibility/4. 2/android-4. 2-cdd. pdf.
18. Google. Android developer guide. http: //developer. android. com/guide/.
19. P. Gosling. Trojan: Trojans & spyware: an electronic achilles. Netw. Secur., 2005 (3): 17-18, Mar. 2005.
20. F. Gross, G. Fraser, and A. Zeller. EXSYST: search-based GUI testing. In ICSE'12.
21. P. Hornyack, S. Han, J. Jung, S. Schechter, and D. Wetherall. These aren't the droids you're looking for: retrotting Android to protect data from imperious applications. In CCS'11.
22. IBM T. J. Watson Research Center. T. J. Watson Libraries for Analysis (WALA). http: //wala. sourceforge. net/.
23. A. Jaaskelainen. Design, Implementation and Use of a Test Model Library for GUI Testing of Smartphone Applications. Doctoral dissertation, Tampere University of Technology, Tampere, Finland, Jan. 2011.
24. Juniper Networks. Juniper mobile security report 2011-unprecedented mobile threat growth. http: //forums. juniper. net/t5/Security-Mobility-Now/ Juniper-Mobile-Security-Report-2011-Unprecedented-Mobile-Threat/ba-p/129529.
25. R. Levy and C. D. Manning. Is it harder to parse Chinese, or the Chinese Treebank In ACL'03.
26. D. Maslennikov. IT threat evolution: Q1 2013. http: //www. securelist. com/en/analysis/204792292/.
27. N. Mirzaei, S. Malek, and R. M. Corina S. Pasareanu, Naeem Esfahani. Testing Android apps through symbolic execution. In JPF'12.
28. National Taiwan University. Chinese wordnet. http: //lope. linguistics. ntu. edu. tw/cwm/.
29. D. Octeau, P. McDaniel, S. Jha, A. Bartel, E. Bodden, J. Klein, and Y. L. Traon. Effective Inter-Component Communication Mapping in Android with Epicc: An Essential Step Towards Holistic Security Analysi. In USENIX Security'13.
30. R. Pandita, X. Xiao, W. Yang, W. Enck, and T. Xie. WHYPER: Towards automating risk assessment of mobile applications. In USENIX Security'13.
31. pxb1988. dex2jar: Tools to work with android. dex and Java. class files. http: //code. google. com/p/dex2jar/.
32. TrendLabs. 3Q 2012 security roundup-Android under siege: Popularity comes at a price. http: //www. trendmicro. com/us/security-intelligence/.
33. S. Zhang, H. Lu, and M. D. Ernst. Finding errors in multithreaded GUI applications. In ISSTA'12.
34. Y. Zhou and X. Jiang. Dissecting Android malware: Characterization and evolution. In S&P'12.
35. Y. Zhou, Z. Wang, W. Zhou, and X. Jiang. Hey, you, get o of my market: Detecting malicious apps in oficial and alternative Android markets. In NDSS'12.