Static analysis of Dalvik bytecode and reflection in Android
(Publication) Google search: [1]
| Static analysis of Dalvik bytecode and reflection in Android | |
|---|---|
| Botnet | |
| Malware | |
| Botnet/malware group | |
| Exploit kits | |
| Services | |
| Feature | |
| Distribution vector | |
| Target | |
| Origin | |
| Campaign | |
| Operation/Working group | |
| Vulnerability | |
| CCProtocol | |
| Date | 2012 / 2012-06-07 |
| Editor/Conference | |
| Link | http://projekter.aau.dk/projekter/en/studentthesis/static-analysis-of-dalvik-bytecode-and-reflection-in-android(4dd9e717-c5d2-4603-a2d7-0f043fe9ea1f).html projecter.aau.dk (projecter.aau.dk Archive copy) |
| Author | Erik Ramsgaard Wognsen, Henrik Søndberg Karlsen |
| Type | |
Abstract
“ Malicious apps pose an important problem on Android, the world's most popular smartphone operating system. Android apps are typically written in Java and compiled to run on the register based Dalvik virtual machine.
Static analysis can approximate program behaviour and this approximation can be used to find malicious behaviour, for example covert sending of expensive text messages.
We expand our original operational semantics for the Dalvik instruction set to more accurately model the Android implementation, and we update our control flow analysis with these changes and improve its precision to achieve useful results when analyzing real apps. The analysis is further expanded to include support for reflection and Javascript interfaces, two dynamic features that are used extensively in popular Android apps.
Finally, we implement a prototype of the analysis which is able to create call graphs and run on real-world apps.
Bibtex
@misc{Lua error: Cannot create process: proc_open(/dev/null): failed to open stream: Operation not permitted2012BFR1199,
editor = {},
author = {Erik Ramsgaard Wognsen, Henrik Søndberg Karlsen},
title = {Static analysis of Dalvik bytecode and reflection in Android},
date = {07},
month = Jun,
year = {2012},
howpublished = {\url{http://projekter.aau.dk/projekter/en/studentthesis/static-analysis-of-dalvik-bytecode-and-reflection-in-android(4dd9e717-c5d2-4603-a2d7-0f043fe9ea1f).html projecter.aau.dk}},
}