악성 앱 분석 도구 보호프로파일 개발

Abstract

Currently, as the spread of smartphones has been activated, crimes using malware apps have increased, and accordingly, security against malware apps is required. In particular, the Android operating system used in smartphones accounts for more than 70% of the market share. Because it is open source-based, there are many vulnerabilities and malicious codes, as well as increased damage to malware apps. Demand will also increase. However, the protection profile for this product group has not been developed, so it is not easy to supply it to national public institutions. This paper defines a malware app analysis tool as a system that detects whether an Android-based app is analyzed by an AI-based algorithm defined in the tool and contains malicious code. A protection profile is established by defining security problems and objectives and deriving security functional components. Through the developed protection profile, it can be used for CC certification and delivery to national public institutions to guarantee trust in malware app analysis tools.