NDLI: A hybrid approach for mobile security threat analysis

Please wait, while we are loading the content...

Lockpicking physical layer key exchange: weak adversary models invite the thief

DroidJust: automated functionality-aware privacy leakage analysis for Android applications

DroidEagle: seamless detection of visually similar Android apps

Injection attacks on 802.11n MAC frame aggregation

SHIELD: a data verification framework for participatory sensing systems

A framework for evaluating pseudonym strategies in vehicular ad-hoc networks

Harvesting developer credentials in Android apps

Applying the protection goals for privacy engineering to mobile devices

UWB rapid-bit-exchange system for distance bounding

CICC: a fine-grained, semantic-aware, and transparent approach to preventing permission leaks for Android permission managers

AppWatcher: unveiling the underground market of trading mobile app reviews

A practical investigation of identity theft vulnerabilities in Eduroam

Liveness verifications for citizen journalism videos

Device-to-identity linking attack using targeted wi-fi geolocation spoofing

TextLogger: inferring longer inputs on touch screen using motion sensors

NFCGate: an NFC relay application for Android

HB+DB, mitigating man-in-the-middle attacks against HB+ with distance bounding

A measurement study of tracking in paid mobile applications

Securacy: an empirical investigation of Android applications' network usage, privacy and security

Danger is my middle name: experimenting with SSL vulnerabilities in Android apps

How far removed are you?: scalable privacy-preserving estimation of social path length with Social PaL

CAPS: context-aware privacy scheme for VANET safety applications

WeChecker: efficient and precise detection of privilege escalation vulnerabilities in Android apps

A hybrid approach for mobile security threat analysis

Freedom of speech: thwarting jammers via a probabilistic approach

How talkative is your mobile device?: an experimental study of Wi-Fi probe requests

Security and system architecture: comparison of Android customizations

Is your commute driving you crazy?: a study of misbehavior in vehicular platoons

Security by mobility in location and track verification

Study of compliance of Android location APIs with Geopriv

SpotShare and nearbyPeople: applications of the Social PaL framework

Physical layer location privacy issue in wireless small cell networks

SVM-based malware detection for Android applications

Device analyzer: a privacy-aware platform to support research on the Android ecosystem

A hybrid approach for mobile security threat analysis

Content Provider	ACM Digital Library
Author	Qian, Ying Bhattacharya, Prabir Qian, Kai Guo, Minzhe You, Wanqing Tao, Lixin
Abstract	Research on effective and efficient mobile threat analysis becomes an emerging and important topic in cybersecurity research area. Static analysis and dynamic analysis constitute two of the most popular types of techniques for security analysis and evaluation; nevertheless, each of them has its strengths and weaknesses. To leverage the benefits of both approaches, we propose a hybrid approach that integrates the static and dynamic analysis for detecting security threats in mobile applications. The key of this approach is the unification of data states and software execution on critical test paths. The approach consists of two phases. In the first phase, a pilot static analysis is conducted to identify potential critical attack paths based on Android APIs and existing attack patterns. In the second phase, a dynamic analysis follows the identified critical paths to execute the program in a limited and focused manner. Attacks shall be detected by checking the conformance of the detected paths with existing attack patterns. The method will report the types of detected attack scenarios based on types of sensitive data that may be compromised, such as web browser cookie.
Starting Page	1
Ending Page	2
Page Count	2
File Format	PDF
ISBN	9781450336239
DOI	10.1145/2766498.2774987
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2015-06-22
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Dynamic analysis Static analysis Data path tracing Symbolic execution Android application analysis
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Exposing software security and availability risks for commercial mobile devices *.

AndroShield: Automated Android Applications Vulnerability Detection, a Hybrid Static and Dynamic Analysis Approach

Android Security via Static Program Analysis

Predicting vulnerable classes in an Android application

Design for a cloud-based hybrid Android application security assessment framework

Hybrid learning: interface generation through static, dynamic, and symbolic analysis

ConDroid: Targeted Dynamic Analysis of Android Applications

DroidDisintegrator: Intra-Application Information Flow Control in Android Apps

A Static Analysis Approach for Automatic Generating Test Cases for Web Applications

A hybrid approach for mobile security threat analysis

Similar Documents

Exposing software security and availability risks for commercial mobile devices *.

AndroShield: Automated Android Applications Vulnerability Detection, a Hybrid Static and Dynamic Analysis Approach

Android Security via Static Program Analysis

Predicting vulnerable classes in an Android application

Design for a cloud-based hybrid Android application security assessment framework

Hybrid learning: interface generation through static, dynamic, and symbolic analysis

ConDroid: Targeted Dynamic Analysis of Android Applications

DroidDisintegrator: Intra-Application Information Flow Control in Android Apps

A Static Analysis Approach for Automatic Generating Test Cases for Web Applications

A hybrid approach for mobile security threat analysis