NDLI: Systematic audit of third-party android phones

Please wait, while we are loading the content...

On the suitability of dissemination-centric access control systems for group-centric sharing

KameleonFuzz: evolutionary fuzzing for black-box XSS detection

Virtualization and security: happily ever after?

On protection in federated social computing systems

Measuring the robustness of source program obfuscation: studying the impact of compiler optimizations on the obfuscation of C programs

Systematic audit of third-party android phones

On quantitative dynamic data flow tracking

Shared responsibility is better than no responsibility: federated encryption in the cloud

Efficient privacy-aware search over encrypted databases

TrustID: trustworthy identities for untrusted mobile devices

An efficient privacy-preserving system for monitoring mobile users: making searchable encryption practical

Streamforce: outsourcing access control enforcement for stream data to the clouds

Automated black-box detection of access control vulnerabilities in web applications

COMPARS: toward an empirical approach for comparing the resilience of reputation systems

Interaction provenance model for unified authentication factors in service oriented computing

PREC: practical root exploit containment for android devices

Security of graph data: hashing schemes and definitions

DroidBarrier: know what is executing on your android

Keystroke biometrics: the user perspective

Is it really you?: user identification via adaptive behavior fingerprinting

Compac: enforce component-level access control in android

PhishSafe: leveraging modern JavaScript API's for transparent and robust protection

RiskMon: continuous and automated risk assessment of mobile applications

Detecting man-in-the-middle attacks on non-mobile systems

DIVILAR: diversifying intermediate language for anti-repackaging on android platform

Inference attack against encrypted range queries on outsourced databases

RopSteg: program steganography with return oriented programming

Relationship-based information sharing in cloud-based decentralized social networks

Wiretap-proof: what they hear is not what you speak, and what you speak they do not hear

Situational awareness through reasoning on network incidents

A modular multi-location anonymized traffic monitoring tool for a WiFi network

SobTrA: a software-based trust anchor for ARM cortex application processors

WebWinnow: leveraging exploit kit workflows to detect malicious urls

Consistency checking in access control

Privacy-preserving audit for broker-based health information exchange

POSTER: a pairing-free certificateless hybrid sign-cryption scheme for advanced metering infrastructures

Spoilt for choice: graph-based assessment of key management protocols to share encrypted data

Trust ranking of medical websites

A cloud architecture for protecting guest's information from malicious operators with memory management

Privacy-preserving publication of provenance workflows

Large-scale machine learning-based malware detection: confronting the "10-fold cross validation" scheme with reality

Securing OAuth implementations in smart phones

Minimizing lifetime of sensitive data in concurrent programs

Systematic audit of third-party android phones

Content Provider	ACM Digital Library
Author	Tian, Guanyu Wang, Zhi Mitchell, Michael
Abstract	Android has become the leading smartphone platform with hundreds of devices from various manufacturers available on the market today. All these phones closely resemble each other with similar hardware and software features. Manufacturers must therefore customize the official Android system to differentiate their devices. Unfortunately, such heavily customization by third-party manufacturers often leads to serious vulnerabilities that do not exist in the official Android system. In this paper, we propose a comparative approach to systematically audit software in third-party phones by comparing them side-by-side to the official system. Specifically, we first retrieve pre-loaded apps and libraries from the phone and build a matching base system from the Android open source project repository. We then compare corresponding apps and libraries for potential vulnerabilities. To facilitate this process, we have designed and implemented DexDiff, a system that can pinpoint fine structural differences between two Android binaries and also present the changes in their surrounding contexts. Our experiments show that DexDiff is efficient and scalable. For example, it spends less than two and half minutes to process two 16.5MB (in total) files. DexDiff is also able to reveal a new vulnerability and details of the invasive CIQ mobile intelligence software.
Starting Page	175
Ending Page	186
Page Count	12
File Format	PDF
ISBN	9781450322782
DOI	10.1145/2557547.2557557
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2014-03-03
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Security audit Dexdiff Static analysis Bindiff Android
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Systematic Analysis and Detection of Misconfiguration Vulnerabilities in Android Smartphones

Reliable Third-Party Library Detection in Android and its Security Applications

Mobile applications: Analyzing private data leakage using third party connections

Cloud based security solution for android smartphones

APKLancet: tumor payload diagnosis and purification for android applications

Model-Based Static Source Code Analysis of Java Programs with Applications to Android Security

Android Security via Static Program Analysis

PatchDroid: scalable third-party security patches for Android devices

Android Malware Static Analysis Techniques

Systematic audit of third-party android phones

Similar Documents

Systematic Analysis and Detection of Misconfiguration Vulnerabilities in Android Smartphones

Reliable Third-Party Library Detection in Android and its Security Applications

Mobile applications: Analyzing private data leakage using third party connections

Cloud based security solution for android smartphones

APKLancet: tumor payload diagnosis and purification for android applications

Model-Based Static Source Code Analysis of Java Programs with Applications to Android Security

Android Security via Static Program Analysis

PatchDroid: scalable third-party security patches for Android devices

Android Malware Static Analysis Techniques

Systematic audit of third-party android phones