Please use this identifier to cite or link to this item:
doi:10.22028/D291-26576
Title: | Taking Android app vetting to the next level with path-sensitive value analysis |
Author(s): | Backes, Michael Bugiel, Sven Derr, Erik Hammer, Christian |
Language: | English |
Year of Publication: | 2014 |
SWD key words: | Informatik Sicherheit |
Free key words: | Android app vetting value analysis |
DDC notations: | 004 Computer science, internet |
Publikation type: | Report |
Abstract: | Application vetting at app stores and market places is the first line of defense to protect mobile end-users from malware, spyware, and immoderately curious apps. However, the lack of a highly precise yetlarge-scaling static analysis has forced market operators to resort to less reliable and only small-scaling dynamic or even manual analysis techniques. In this paper, we present Bati, an analysis framework specifically tailored to perform highly precise static analysis of Android apps. Building on established static analysis frameworks for Java, we solve two important challenges to reach this goal: First, we extend this ground work with an Android application lifecycle model that includes the asynchronous communication of multi-threading. Second, we introduce a novel value analysis algorithm that builds on controlflow ordered backwards slicing and techniques from partial and symbolic evaluation. As a result, Bati is the first context-, flow-, object-, and path-sensitive analysis framework for Android apps and improves the statusquo for static analysis on Android. In particular, we empirically demonstrate the benefits of Bati in dissecting Android malware by statically detecting behavior that previously required manual reverse engineering. Noticeably, in contrast to the common conjecture about pathsensitive analyses, our evaluation of 19,700 apps from Google Play shows that highly precise path-sensitive value analysis of Android apps is possible in a reasonable amount of time and is hence amenable for largescale vetting processes |
Link to this record: | urn:nbn:de:bsz:291-scidok-59066 hdl:20.500.11880/26632 http://dx.doi.org/10.22028/D291-26576 |
Series name: | Technischer Bericht / A / Fachbereich Informatik, Universität des Saarlandes |
Series volume: | 2014/02 |
Date of registration: | 6-Oct-2014 |
Faculty: | MI - Fakultät für Mathematik und Informatik |
Department: | MI - Informatik |
Collections: | SciDok - Der Wissenschaftsserver der Universität des Saarlandes |
Files for this record:
File | Description | Size | Format | |
---|---|---|---|---|
TechReport.A.02.2014.pdf | 805,98 kB | Adobe PDF | View/Open |
Items in SciDok are protected by copyright, with all rights reserved, unless otherwise indicated.