Smartdroid: An automatic system for revealing ui-based trigger conditions in android applications | |
Zheng, Cong ; Zhu, Shixiong ; Dai, Shuaifu ; Gu, Guofei ; Gong, Xiaorui ; Han, Xinhui ; Zou, Wei | |
2012 | |
英文摘要 | User interface UIinteractions are essential to Android applications, as many Activities require UI interactions to be triggered. This kind of UI interactions could also help malicious apps to hide their sensitive behaviors e.g., sending SMS or getting the user's device IDfrom being detected by dynamic analysis tools such as TaintDroid, because simply running the app, but without proper UI interactions, will not lead to the exposure of sensitive behaviors. In this paper we focus on the challenging task of triggering a certain behavior through automated UI interactions. In particular, we propose a hybrid static and dynamic analysis method to reveal UI-based trigger conditions in Android applications. Our method first uses static analysis to extract expected activity switch paths by analyzing both Activity and Function Call Graphs, and then uses dynamic analysis to traverse each UI elements and explore the UI interaction paths towards the sensitive APIs. We implement a prototype system SmartDroid and show that it can automatically and efficiently detect the UI-based trigger conditions required to expose the sensitive behavior of several Android malwares, which otherwise cannot be detected with existing techniques such as TaintDroid.; EI; 0 |
语种 | 英语 |
DOI标识 | 10.1145/2381934.2381950 |
内容类型 | 其他 |
源URL | [http://ir.pku.edu.cn/handle/20.500.11897/412157] |
专题 | 计算机科学技术研究所 |
推荐引用方式 GB/T 7714 | Zheng, Cong,Zhu, Shixiong,Dai, Shuaifu,et al. Smartdroid: An automatic system for revealing ui-based trigger conditions in android applications. 2012-01-01. |
个性服务 |
查看访问统计 |
相关权益政策 |
暂无数据 |
收藏/分享 |
除非特别说明,本系统中所有内容都受版权保护,并保留所有权利。
修改评论