Can I read Android Repository Mining for Detecting Publicly Accessible Functions Missing Permission Checks on EtoBox?

Android Repository Mining for Detecting Publicly Accessible Functions Missing Permission Checks by Hoang H. Nguyen; Lingxiao Jiang; Tho Quan is a scholarly article available to read on EtoBox.

What is Android Repository Mining for Detecting Publicly Accessible Functions Missing Permission Checks about?

Android has become the most popular mobile operating system. Millions of applications, including many malware, haven been developed for it. Even though its overall system architecture and many APIs are documented, many other methods and implementation details are not, not to mention potential bugs and vulnerabilities that may be exploited. Manual documentation may also be easily outdated as Android evolves constantly with changing features and higher complexities. Techniques and tool supports are thus needed to automatically extract information from different versions of Android to facilitate whole-system analysis of undocumented code. This paper presents an approach for alleviating the challenges associated with whole-system analysis. It performs usual program analysis for different versions of Android by control-flow and data-flow analyses. More importantly, it integrates information retrieval and query heuristics to customize the graphs for purposes related to the queries and make whole-system analyses more efficient. In particular, we use the approach to identify functions in Android that can be invoked by applications in either benign or malicious way, which are referred to as

Author

Hoang H. Nguyen; Lingxiao Jiang; Tho Quan

Publisher

IEEE

Published

2017

Language

EN