Earticle

초록

영어

The number of mobile applications on Android platform has largely increased in recent years. The security problems, as one of the outcomes induced by the popularity of Android, become more and more critical. Malicious repackaged applications (MRAs) perform malicious behaviors through malware developers embedding malicious codes into the benign origin applications (BOAs), which threat the security of users’ finance and privacy. In this paper, a method based on API calls monitoring is proposed to effectively detect MRAs. We discuss the characteristics of behaviors and analyze the differences in API calls between MRAs and their BOAs. A MRA detection model is established, which builds up the super-sphere for each BOA via a SVDD algorithm. The model can detect the abnormal behaviors of MRAs which deviate the normal behaviors of corresponding BOAs. Experiments are carried out on imitated and real MRAs, where the results demonstrate the effectiveness of our method for detecting the singly and multiply contaminated BOAs.

목차

Abstract
 1. Introduction
 2. Related Work
 3. MRA Detection Model
  3.1. Feature Extraction
  3.2. Behavior Description
  3.3. MRA Detection Process
 4. Experiment Results and Analysis
  4.1. Imitated Malicious Repackaged Applications
  4.2. Real Malicious Repackaged Applications
 5. Conclusion
 Acknowledgements
 References

키워드

저자

• Wenhao Fan [ School of Electronic Engineering, Beijing University of Posts and Telecommunications, Beijing 100876, China, Beijing Key Laboratory of Work Safety Intelligent Monitoring, Beijing University of Posts and Telecommunications, Beijing 100876, China ]
• Yuan’an Liu [ School of Electronic Engineering, Beijing University of Posts and Telecommunications, Beijing 100876, China, Beijing Key Laboratory of Work Safety Intelligent Monitoring, Beijing University of Posts and Telecommunications, Beijing 100876, China ]
• Bihua Tang [ School of Electronic Engineering, Beijing University of Posts and Telecommunications, Beijing 100876, China, Beijing Key Laboratory of Work Safety Intelligent Monitoring, Beijing University of Posts and Telecommunications, Beijing 100876, China ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605