NDLI: DroidAlarm: an all-sided static analysis tool for Android privilege-escalation malware

Please wait, while we are loading the content...

AppInk: watermarking android apps for repackaging deterrence

Multi-key leakage-resilient threshold cryptography

Looking at the bag is not enough to find the bomb: an evasion of structural methods for malicious PDF files detection

SocialWatch: detection of online service abuse via large-scale social graphs

The role and effectiveness of cryptography in network virtualization: a position paper

Efficient dynamic provable possession of remote data via balanced update trees

Expressive search on encrypted data

Gadge me if you can: secure and efficient ad-hoc instruction-level randomization for x86 and ARM

Secure cloud-assisted location based reminder

k-anonymous reputation

Robust network traffic identification with unknown applications

TabShots: client-side detection of tabnabbing attacks

LogicScope: automatic discovery of logic vulnerabilities within web applications

Towards fully incremental cryptographic schemes

PSiOS: bring your own privacy & security to iOS devices

Privacy-preserving multi-keyword text search in the cloud supporting similarity-based ranking

Efficient user-space information flow control

Privacy settings in social networking systems: what you cannot control

Weak leakage-resilient client-side deduplication of encrypted data in cloud storage

Towards asymmetric searchable encryption with message recovery and flexible search authorization

Enforcing system-wide control flow integrity for exploit detection and diagnosis

DroidChameleon: evaluating Android anti-malware against transformation attacks

Privacy-preserving smart metering with regional statistics and personal enquiry services

STRIDE: sanctuary trail -- refuge from internet DDoS entrapment

Fuzzing the ActionScript virtual machine

Protecting function pointers in binary

Anonymous attribute-based encryption supporting efficient decryption test

On the effectiveness of API-level access control using bytecode rewriting in Android

Practical and post-quantum authenticated key exchange from one-way secure key encapsulation mechanism

Trustworthy distributed computing on social networks

Data-oblivious graph algorithms for secure computation and outsourcing

Boolean symmetric searchable encryption

Bind your phone number with caution: automated user profiling through address book matching on smartphone

Protecting privacy by sanitizing personal data: a new approach to anonymous credentials

Practical verification of WPA-TKIP vulnerabilities

Sensing-enabled channels for hard-to-detect command and control of mobile devices

The (un)reliability of NVD vulnerable versions data: an empirical experiment on Google Chrome vulnerabilities

A group signature scheme with unbounded message-dependent opening

Designing leakage-resilient password entry on touchscreen mobile devices

Blank digital signatures

On the feasibility of inference attacks by third-party extensions to social network systems

SecLaaS: secure logging-as-a-service for cloud forensics

Multi-channel broadcast encryption

Towards preventing QR code based attacks on android phone using security warnings

An information-flow type-system for mixed protocol secure computation

Faster secure two-party computation with less memory

Horizon extender: long-term preservation of data leakage evidence in web traffic

Attribute-based fine-grained access control with efficient revocation in cloud storage systems

Your love is public now: questioning the use of personal information in authentication

Pseudorandom signatures

Dynamix: anonymity on dynamic social structures

An empirical study on the software integrity of virtual appliances: are you really getting what you paid for?

Comparative study of multicast authentication schemes with application to wide-area measurement system

Time evolving graphical password for securing mobile devices

Covert computation: hiding code in code for obfuscation purposes

Protecting access privacy of cached contents in information centric networks

DroidAlarm: an all-sided static analysis tool for Android privilege-escalation malware

Proof of plaintext knowledge for code-based public-key encryption revisited

An efficient and probabilistic secure bit-decomposition

Defining verifiability in e-auction protocols

Verifiable and private top-k monitoring

DroidAlarm: an all-sided static analysis tool for Android privilege-escalation malware

Content Provider	ACM Digital Library
Author	Xie, Li Zhongyang, Yibing Mao, Bing Xin, Zhi
Abstract	Since smartphones have stored diverse sensitive privacy information, including credit card and so on, a great deal of malware are desired to tamper them. As one of the most prevalent platforms, Android contains sensitive resources that can only be accessed via corresponding APIs, and the APIs can be invoked only when user has authorized permissions in the Android permission model. However, a novel threat called privilege escalation attack may bypass this watchdog. It's presented as that an application with less permissions can access sensitive resources through public interfaces of a more privileged application, which is especially useful for malware to hide sensitive functions by dispersing them into multiple programs. We explore privilege-escalation malware evolution techniques on samples from Android Malware Genome Project. And they have showed great effectiveness against a set of powerful antivirus tools provided by VirusTotal. The detection ratios present different and distinguished reduction, compared to an average 61% detection ratio before transformation. In order to conquer this threat model, we have developed a tool called DroidAlarm to conduct a full-spectrum analysis for identifying potential capability leaks and present concrete capability leak paths by static analysis on Android applications. And we can still alarm all these cases by exposing capability leak paths in them.
Starting Page	353
Ending Page	358
Page Count	6
File Format	PDF
ISBN	9781450317672
DOI	10.1145/2484313.2484359
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2013-05-08
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Malware transformation Static analysis Capability leaks Privilege escalation attack Android
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

DroidChecker: analyzing android applications for capability leak

6 Testing Android Anti-Malware against Malware

WeChecker: efficient and precise detection of privilege escalation vulnerabilities in Android apps

STUDY OF PRIVILEGE ESCALATION ATTACK ON ANDROID AND ITS COUNTERMEASURES

PtmxGuard: An Improved Method for Android Kernel to Prevent Privilege Escalation Attack

XManDroid: A New Android Evolution to Mitigate Privilege Escalation Attacks

Upgrading Your Android, Elevating My Malware: Privilege Escalation through Mobile OS Updating

Techniques for analysing Android malware

MADLIRA -a tool for Android malware detection

DroidAlarm: an all-sided static analysis tool for Android privilege-escalation malware

Similar Documents

DroidChecker: analyzing android applications for capability leak

6 Testing Android Anti-Malware against Malware

WeChecker: efficient and precise detection of privilege escalation vulnerabilities in Android apps

STUDY OF PRIVILEGE ESCALATION ATTACK ON ANDROID AND ITS COUNTERMEASURES

PtmxGuard: An Improved Method for Android Kernel to Prevent Privilege Escalation Attack

XManDroid: A New Android Evolution to Mitigate Privilege Escalation Attacks

Upgrading Your Android, Elevating My Malware: Privilege Escalation through Mobile OS Updating

Techniques for analysing Android malware

MADLIRA -a tool for Android malware detection

DroidAlarm: an all-sided static analysis tool for Android privilege-escalation malware