Malware detection technology analysis and applied research of android platform

Wei-ping WEN; Rui MEI; Ge NING; Liang-liang WANG

doi:10.3969/j.issn.1000-436x.2014.08.011

您当前的位置：

首页 >

文章列表页 >

Malware detection technology analysis and applied research of android platform

Academic paper | 更新时间：2024-10-11

- Malware detection technology analysis and applied research of android platform
- Journal on Communications Vol. 35, Issue 8, Pages: 78-85(2014)
- 作者机构：
  
  北京大学软件与微电子学院，北京 102600
- 作者简介：
- 基金信息：
- DOI：10.3969/j.issn.1000-436x.2014.08.011
  CLC： TP309
- Online First：2014-08，
  
  Published：25 August 2014
- 稿件说明：
移动端阅览
Wei-ping WEN, Rui MEI, Ge NING, et al. Malware detection technology analysis and applied research of android platform[J]. Journal on Communications, 2014, 35(8): 78-85.
DOI：

Wei-ping WEN, Rui MEI, Ge NING, et al. Malware detection technology analysis and applied research of android platform[J]. Journal on Communications, 2014, 35(8): 78-85. DOI： 10.3969/j.issn.1000-436x.2014.08.011.

摘要

针对Android平台安全问题，提出了手机端和服务端协作的恶意代码检测方案，手机端应用主要采用基于permission检测技术，实现轻量级的检测。服务端检测系统主要负责对手机端提交的可疑样本进行检测，同时实现了软件行为分析，特征库更新，与手机端同步等功能。其中服务端检测技术包括基于permission检测技术、基于字节码静态检测技术和基于root权限的动态检测技术。实验测试结果表明，3种检测技术能达到较好的检测效果。

Abstract

For the Android platform security problem

a mobile client and server collaborative malware detection pro-posal was proposed

where mobile client application was mainly based on permission detection technology and imple-mented lightweight testing. The server-side detection system is mainly responsible for testing suspicious samples submit-ted by the mobile terminals

meanwhile implements the functions of software behavior analysis

signature library updates

and mobile client synchronization

etc. The server-side detection techniques include permission-based detection technol-ogy

bytecode-based static detection technology and root-based dynamic detection technology. The result of the experi-ment shows that the three detection techniques can achieve better detection results.

关键词

Keywords

references

JESSE B . Developing secure mobile application for Android [EB/OL ] https://www.isecpartners.com/files/iSEC_Securing_Android_Apps.pdf https://www.isecpartners.com/files/iSEC_Securing_Android_Apps.pdf , 2008 .

SCHMIDT A D , SCHMIDT H G , BATYUK L . Smartphone malware evolution revisited: Android next target [A ] . Proceedings of the 4th IEEE International Conference on Malicious and Unwanted Software [C ] . USA , 2009 . 1 - 7 .

SCHMIDT A D , SCHMIDT H G , CLAUSEN J . Static analysis of executables for collaborative malware detection on android [A ] . IEEE International Congress on Communication (ICC) 2009 - Communica-tion and Information Systems Security Symposium [C ] . 2009 .

ENCK W , ONGTANG M , MCDANIEL P . Understanding Android security [J ] . IEEE Security and Privacy , 2009 , 7 ( 1 ): 50 - 57 .

SHABTAI A , FLEDEL Y , ELOVICI Y . Securing android-powered mobile devices using selinux [J ] . IEEE Security and Privacy [C ] . 2009 . 10 - 15 .

BERGERON J , DEBBABI M , DESHARNAIS J . Static detection of malicious code in executable programs [A ] . Proceedings of the Sym-posium on Requirements Engineering for Information Security [C ] . USA , 2001 . 20 - 24 .

MOSER A , KRUEGEL C , KIRDA E . Limits of static analysis for malware detection [A ] . Proceedings of the 23rd Annual Computer Se-curity Application Conference [C ] . Seoul, Korea , 2007 . 421 - 430 .

BISHOP M A . The Art and Science of Computer Security [M ] . Boston:Addison-Wesley Longman Publishing Co , 2002 . 213 - 217 .

http://www.symantec.com/security_response/writeup.jspdocid=2011-022303-3344-99[EB/OL] http://www.symantec.com/security_response/writeup.jspdocid=2011-022303-3344-99[EB/OL] [EB/OL ] . 2001 .

Views

895

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

PyFuzzer：automatic in-memory fuzz testing method

Network-based malcode detection technology

Related Author

Wei-ming LI

Jun-qing YU

Shao-bo AI

WU Bing1

YUN Xiao-chun2

GAO Qi1

Related Institution

Network and Computation Center,Huazhong University of Science and Technology

Research Center of Computer Network and Information Security Technology,Harbin Institute of Technology

AI问答

⁰