Please use this identifier to cite or link to this item: doi:10.22028/D291-26576
Title: Taking Android app vetting to the next level with path-sensitive value analysis
Author(s): Backes, Michael
Bugiel, Sven
Derr, Erik
Hammer, Christian
Language: English
Year of Publication: 2014
SWD key words: Informatik
Free key words: Android app
vetting value analysis
DDC notations: 004 Computer science, internet
Publikation type: Report
Abstract: Application vetting at app stores and market places is the first line of defense to protect mobile end-users from malware, spyware, and immoderately curious apps. However, the lack of a highly precise yetlarge-scaling static analysis has forced market operators to resort to less reliable and only small-scaling dynamic or even manual analysis techniques. In this paper, we present Bati, an analysis framework specifically tailored to perform highly precise static analysis of Android apps. Building on established static analysis frameworks for Java, we solve two important challenges to reach this goal: First, we extend this ground work with an Android application lifecycle model that includes the asynchronous communication of multi-threading. Second, we introduce a novel value analysis algorithm that builds on controlflow ordered backwards slicing and techniques from partial and symbolic evaluation. As a result, Bati is the first context-, flow-, object-, and path-sensitive analysis framework for Android apps and improves the statusquo for static analysis on Android. In particular, we empirically demonstrate the benefits of Bati in dissecting Android malware by statically detecting behavior that previously required manual reverse engineering. Noticeably, in contrast to the common conjecture about pathsensitive analyses, our evaluation of 19,700 apps from Google Play shows that highly precise path-sensitive value analysis of Android apps is possible in a reasonable amount of time and is hence amenable for largescale vetting processes
Link to this record: urn:nbn:de:bsz:291-scidok-59066
Series name: Technischer Bericht / A / Fachbereich Informatik, Universität des Saarlandes
Series volume: 2014/02
Date of registration: 6-Oct-2014
Faculty: MI - Fakultät für Mathematik und Informatik
Department: MI - Informatik
Collections:SciDok - Der Wissenschaftsserver der Universität des Saarlandes

Files for this record:
File Description SizeFormat 
TechReport.A.02.2014.pdf805,98 kBAdobe PDFView/Open

Items in SciDok are protected by copyright, with all rights reserved, unless otherwise indicated.