Android App behavior-intent inference based on API usage analysis

被引：0
|
作者：
Shen K. [1 ]
Ye X. [1 ]
Liu X. [2 ]
Li B. [2 ]
机构：
[1] School of Software, Tsinghua University, Beijing
[2] China Information Technology Security Evaluation Center, Beijing
来源：
Ye, Xiaojun (yexj@tsinghua.edu.cn) | 1600年 / Tsinghua University卷 / 57期
关键词：
Android application; API usage; Application behavior; Data security; Dynamic analysis;
D O I：
10.16511/j.cnki.qhdxxb.2017.26.057
中图分类号：
学科分类号：
摘要：
An application behavior intention analysis is presented which analyzes the application program interface (API) usage in the background and the graphic user interface (GUI) state transitions in the foreground of the target App with behavior pattern recognition of the multivariate time series data at runtime. An API usage analysis based behavior intent inferring prototype was developed for Android Apps with static preprocessing, dynamic monitoring and behavior intent inference. This paper examines the effectiveness of the prototype on typical mobile Apps via case studies and validates the practicability and operability of the approach through real-world App profiling. © 2017, Tsinghua University Press. All right reserved.
引用
收藏
页码：1139 / 1144
页数：5
相关论文
共 14 条
  • [1] Arzt S., Rasthofer S., Fritz C., Et al., Flowdroid: Precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for android apps, ACM SIGPLAN Notices, 49, 6, pp. 259-269, (2014)
  • [2] Li L., Bartel A., Bissyande T.F., Et al., Iccta: Detecting inter-component privacy leaks in Android Apps, Proceedings of the 37th ICSE, pp. 280-291, (2015)
  • [3] Wei F., Roy S., Ou X., Et al., Amandroid: A precise and general inter-component data flow analysis framework for security vetting of Android Apps, Proceedings of the 2014 ACM SIGSAC, pp. 1329-1341, (2014)
  • [4] Yang Z., Yang M., Zhang Y., Et al., Appintent: Analyzing sensitive data transmission in Android for privacy leakage detection, Proceedings of the SIGSAC, pp. 1043-1054, (2013)
  • [5] Huang J., Zhang X., Tan L., Et al., AsDroid: Detecting stealthy behaviors in Android applications by user interface and program behavior contradiction, Proceedings of the 36th ICSE, pp. 1036-1046, (2014)
  • [6] Bayer U., Comparetti P.M., Hlauschek C., Et al., Scalable, behavior-based malware clustering, Network and Distributed System Security Symposium, pp. 8-11, (2009)
  • [7] Burguera I., Zurutuza U., Nadjm-Tehrani S., Crowdroid: Behavior-based malware detection system for Android, Proceedings of the Security and Privacy in Smartphones and Mobile Devices, pp. 15-26, (2011)
  • [8] Jang J.W., Yun J., Woo J., Et al., Android-profiler: Anti-malware system based on behavior profiling of mobile malware, Proceedings of the 23rd WWW, pp. 737-738, (2014)
  • [9] Yan L.K., Yin H., Droidscope: Seamlessly reconstructing the os and dalvik semantic views for dynamic Android malware analysis, USENIX Security Symposium, pp. 569-584, (2012)
  • [10] Lantz P., Droidbox: Dynamic analysis of Android Apps
12