Earticle

초록

영어

Due to the openness of the Android-based open market, the distribution of malicious applications developed by attackers is increasing rapidly. In order to reduce the damage caused by the malicious applications, the mechanism that allows more accurate way to determine normal apps and malicious apps for common mobile devices should be developed. In this paper, the normal system call event patterns were analyzed from the most highly used game app in the Android open market, and the malicious system call event patterns were also analyzed from the malicious game apps extracted from 1260 malware samples distributed by Android MalGenome Project. Using the Strace tool, system call events are aggregated from normal and malicious apps. And analysis of relevance to each event set was performed. Through this process of analyzing the system call events, we can extract a similarity to determine whether any given app is malicious or not.

목차

Abstract
 1. Introduction
 2. Vulnerability of Android Platform
 3. Normal Game App System Event Pattern Analysis
  3.1. Category based System Call Event Analysis
  3.2. Permission based System Call Event Analysis
  3.3. Normal Game App System Event Pattern Analysis
 4. Malicious Game App System Event Pattern Analysis
  4.1. Activity based Analysis
  4.2. Method based Analysis
  4.3. Malicious App System Event Pattern Analysis
 5. Comparison between Normal and Malicious App Event Patterns and Determination
  5.1. System Event Pattern Comparison
  5.2. Malicious Application Distinction
 6. Conclusions
 Acknowledgements
 References

키워드

저자

• You Joung Ham [ Dept. of Computer Engineering, Hanshin University, 411, Yangsan-dong, Osan, Gyyeonggi, 447-791, Rep. of Korea ]
• Daeyeol Moon [ Dept. of Computer Engineering, Hanshin University, 411, Yangsan-dong, Osan, Gyyeonggi, 447-791, Rep. of Korea ]
• Hyung-Woo Lee [ Dept. of Computer Engineering, Hanshin University, 411, Yangsan-dong, Osan, Gyyeonggi, 447-791, Rep. of Korea ]
• Jae Deok Lim [ Cyber Security-Convergence Research Laboratory, ETRI, 218, Gajeongno, Yuseong-gu, Daejeon, 305- 700, Rep. of Korea ]
• Jeong Nyeo Kim [ Cyber Security-Convergence Research Laboratory, ETRI, 218, Gajeongno, Yuseong-gu, Daejeon, 305- 700, Rep. of Korea ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605