시스템 콜 이벤트 분석을 활용한 악성 애플리케이션 판별
Malicious Application Determination Using the System Call Event
1
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
최근 스마트폰 시장의 빠른 성장과 함께, 애플리케이션 시장 또한 크게 성장하고 있다. 애플리케이션은 날씨, 뉴스와 같은 정보검색을비롯하여 교육, 게임, SNS 등 다양한 형태로 제공되고 있으며 다양한 유통경로를 통해 배포되고 있다. 이에 따라 일상에서 유용하게 사용할 수 있는 애플리케이션뿐만 아니라 악의적 목적을 가진 악성 애플리케이션의 배포 역시 급증하고 있다. 본 연구에서는 오픈마켓을 통해배포되고 있는 정상 애플리케이션 및 Android MalGenome Project에서 제공하는 악성 애플리케이션의 이벤트를 추출, 분석하여 임의의 애플리케이션의 악성 여부를 판별하는 모형을 작성하고, 여러 가지 지표를 통해 모형을 평가하였다.
Abstract
Recently smartphone market is rapidly growing and application market has also grown significantly. Mobile applications have been provided in various forms, such as education, game, SNS, weather and news. And It is distributed through a variety of distribution channels. Malicious applications deployed with malicious objectives are growing as well as applications that can be useful in everyday life well. In this study, Events from a malicious application that is provided by the normal application deployment and Android MalGenome Project through the open market were extracted and analyzed. And using the results, We create a model to determine whether the application is malicious. Finally, model was evaluated using a variety of statistical method.
참고문헌 (13)
- 함유정, "안드로이드 모바일 정상 및 악성 앱 시스템 콜 이벤트 패턴 분석을 통한 유사도 추출 기법", 인터넷정보학회논문지, 14(6), pp.125~139 (2013), 한국인터넷정보학회[DOI]
- Wajeb, "Software Vulnerabilities, Banking Threats, Botnets and Malware Self-Protection Technologies", International Journal of Computer Science Issues(IJCSI), 8(1), pp.236~241 (2011)
- I. Burguera, "Crowdroid : Behavoir-Based Malware Detection System for Android", Proceeding of the 1st ACM workshop on security and privacy in smartphones and mobile devices(SPSM’11), 1, pp.15~26 (2011)
- Y. J. Ham, "Malicious Application Event Discrimination and Diagnosis Mechanism on SmartPhone", Master, pp.2014
- Suphakit Niwattanakul, "Using of Jaccard Coefficient for Keywards Similarity", Proceedings of the International MultiConference of Engineering and Computer Scientists 2013 (IMECS 2013), 1, pp.13~15 (2013)
- "Android Malgenome Project"[URL]
- "Strace, trace system calls and signals"[URL]
- Stehman, Stephen V, "Selecting and interpreting measures of thematic classification accuracy", Remote Sensing of Environment, 62(1), pp.77~89 (1997)
- Fawcelt, Tom, "An Introduction to ROC Analysis", Pattern Recognition Letters, 27(8), pp.861~874 (2006)
- Signal detection theory and ROC analysis in psychology and diagnostics, "Swets, John A", Lawrence Erlbaum Associates, ~ (1996)
- C. H. Jun, "Data mining Techniques" (2012), Hannarae
- Breiman, L., "Classification and regression trees" (1984), CRC press
- Christopher M. Bishop, "Pattern Recognition and Machine Learning", pp.205~ (2006), Springer