Design of Detection and Defensing method for Information Stealing app on Android Devices

• Main Authors: Kek-Tung Fung, 馮國棟
• Other Authors: Ming-Yang Su
• Format: Others
• Language: zh-TW
• Published: 2015
• Online Access: http://ndltd.ncl.edu.tw/handle/58s3dy

碩士 === 銘傳大學 === 資訊工程學系碩士班 === 104 === Smart Phone’s function nowadays have become more powerful, according to the market share of Operating System of Smart Phone from International Data Corporation market analyzing website, Android OS has occupied 78% of the market share. McAfee Lab security report pointed out that Malware of Android OS continue to growth and had threated the user of Android OS. We propose an Analysis system using static and dynamic analysis technique, which can let the user use our analysis tool to scan the android application before installing on their device. On the static analysis layer, we will use the application’s permission, native-permission, intent-priority and function call as the feature. For the dynamic analysis, we will set up a Sandbox environment, using Android virtual device as an isolated environment. The application will installed on the AVD and use the MonkeyRunner tool to simulate the user behavior, monitoring the behavior will affected the application which will be used to analysis suspicious behavior. Our proposed method will run static analysis on the devices, and using sandbox environment to analysis the application as dynamic analysis, which can help to increase the detection rate of malware on the field as well as increase the user experience.