A Static Assurance Analysis of Android Applications

Simple item page
dc.contributor.authorElish, Karim O.en
dc.contributor.authorYao, Danfeng (Daphne)en
dc.contributor.authorRyder, Barbara G.en
dc.contributor.authorJiang, Xuxianen
dc.contributor.departmentComputer Scienceen
dc.date.accessioned2013-07-11T16:27:13Zen
dc.date.available2013-07-11T16:27:13Zen
dc.date.issued2013-07-11en
dc.description.abstractWe describe an efficient approach to identify malicious Android applications through specialized static program analysis. Our solution – referred to as user intention program dependence analysis – performs offline analysis to find the dependence relations between user triggers and entry points to methods providing critical system functions. Analyzing these types of dependences in programs can identify the privileged operations (e.g., file, network operations and sensitive data access) that are not intended by users. We apply our technique on 708 free popular apps and 482 malware apps for Android OS, and the experimental results show that our technique can differentiate between legitimate and malware applications with high accuracy. We also explain the limitations of the user-intention-based approach and point out the need for practitioners to adopt multiple analysis tools for evaluating the assurance of Android applications.en
dc.identifier.trnumberTR-13-03en
dc.identifier.urihttp://hdl.handle.net/10919/23302en
dc.language.isoenen
dc.publisherDepartment of Computer Science, Virginia Polytechnic Institute & State Universityen
dc.relation.ispartofComputer Science Technical Reportsen
dc.rightsIn Copyrighten
dc.rights.urihttp://rightsstatements.org/vocab/InC/1.0/en
dc.subjectComputer scienceen
dc.subjectSoftware engineeringen
dc.titleA Static Assurance Analysis of Android Applicationsen
dc.typeTechnical reporten
dc.type.dcmitypeTexten

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
user-intention-PA-2013.pdf
Size:
591.48 KB
Format:
Adobe Portable Document Format
Download
License bundle
Now showing 1 - 1 of 1
Name:
license.txt
Size:
1.5 KB
Format:
Item-specific license agreed upon to submission
Description:
Download

Collections

Computer Science Technical Reports
Destination Area: Integrated Security (IS)