Composition-malware: building Android malware at run time

被引：34

作者：

Canfora, Gerardo ^{[1
]}

Mercaldo, Francesco ^{[1
]}

Moriano, Giovanni ^{[1
]}

Visaggio, Corrado Aaron ^{[1
]}

机构：

[1] Univ Sannio, Dept Engn, Benevento, Italy

来源：

PROCEEDINGS 10TH INTERNATIONAL CONFERENCE ON AVAILABILITY, RELIABILITY AND SECURITY ARES 2015 | 2015年

关键词：

security; Android; malware; virus; reflection; dynamic loading;

D O I：

10.1109/ARES.2015.64

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

We present a novel model of malware for Android, named composition-malware, which consists of composing fragments of code hosted on different and scattered locations at run time. An key feature of the model is that the malicious behavior could dynamically change and the payload could be activated under logic or temporal conditions. These characteristics allow a malware written according to this model to evade current malware detection technologies for Android platform, as the evaluation has demonstrated. The aim of the paper is to propose new approaches to malware detection that should be adopted in anti-malware tools for blocking a composition-malware.

引用

页码：318 / 326

页数：9