개인정보 유출 탐지 및 차단에 관한 연구 : 안드로이드 플랫폼 환경
Study to detect and block leakage of personal information : Android-platform environment
0
조회
0
다운로드
5
인용
0
참고문헌
키워드
초록
안드로이드 사용자의 증가와 함께 안드로이드를 타겟으로 하는 악성코드가 급격하게 증가하고 있으며, 대부분의 악성코드는 사용자의 개인정보 유출을 목적으로 하고 있다. 최근 국내에서도 악성코드를 이용해 개인정보를 유출하고,소액결제를 시도하는 ‘체스트’라는 악성코드가 출현하여 금전피해를 발생시켰다. 안드로이드 플랫폼에서 개인정보 유출을 탐지하기 위한 다양한 기법들이 제안되었지만, 기존 기법들은 안드로이드 보안모델의 특성상 사용자의 스마트폰에 적용이 어려운 한계를 가지고 있다. 본 논문에서는 커널레벨의 시스템 콜 후킹과 white-list 기반의 접근정책을이용해 허용되지 않은 개인정보의 접근과 인터넷 연결을 실시간으로 탐지하고, 차단하는 기법을 제안하였다. 또한 구현을 통해 실제 사용자의 스마트폰에 적용이 가능함을 증명하였다.
Abstract
The Malicious code that targets Android is growing dramatically as the number of Android users are increasing. Most of the malicious code have an intention of leaking personal information. Recently in Korea, a malicious code 'chest' has appeared and generated monetary damages by using malicious code to leak personal information and try to make small purchases. A variety of techniques to detect personal information leaks have been proposed on Android platform. However, the existing techniques are hard to apply to the user's smart-phone due to the characteristics of Android security model. This paper proposed a technique that detects and blocks file approaches and internet connections that are not allowed access to personal information by using the system call hooking in the kernel and white-list based approach policy. In addition, this paper proved the possibility of a real application on smart-phone through the implementation.
참고문헌 (16)
- "2012 Security Report" (2013)[URL]
- "Gartner Says Worldwide Mobile Phone Sales Declined 1.7 Percent in 2012" (2013)[URL]
- "안드로이드 악성코드 결제 피해국내 발생" (2012)[URL]
- F. Di Cerbo, "Detection of malicious applications on android os", Proceedings of the 4th international conference on Computational forensics, IWCF’10, pp.138~149 (2011)
- S. Kim, "A study on static analysis model of mobile application for privacy protection", Computer Science and Convergence, 114, pp.529~540 (2012)
- Y. Zhou, "get off of my market: Detecting malicious apps in official and alternative Android markets", Proceedings of the 19th Annual Network & Distributed System Security Symposium (2012)
- Dong-Jie Wu, "DroidMat: Android Malware Detection through Manifest and API Calls Tracing", 2012 Seventh Asia Joint Conference on Information Security (Asia JCIS), pp.62~29 (2012)
- SCanDroid: Automated Security Certification of Android Applications, "A. P. Fuchs", Department of Computer Science, University of Maryland, ~, pp.Technical Report CSTR-4991 (2009)
- W. Enck, "Taintdroid: An information-flow tracking system for realtime privacy monitoring on smartphones", Proceedings of the 9th USENIX conference on Operating systems design and implementation (2010)
- M. Zhao, "Antimaldroid: An efficient svmbased malware detection framework for android", Communications in Computer and Information Science, 243, pp.158~166 (2011)
- 심원태, "안드로이드 앱 악성행위 탐지를 위한 분석 기법 연구", 정보보호학회논문지, 21(1), pp.213~219 (2011), 한국정보보호학회
- Iker Burguera, "crowdroid: behaviorbased malware detection system for Android", Proceedings of the 1st ACM workshop on Security and privacy in smartphones and mobile devices, pp.15~26 (2011)
- T. Isohara, "Kernel-based Behavior Analysis for Android Malware Detection", 2011 Seventh International Conference on Computational Intelligence and Security, pp.1011~1015 (2011)
- T. Bläsing, "An Android Application Sandbox system for suspicious software detection", 2010 5th International Conference on Malicious and Unwanted Software (MALWARE), pp.55~62 (2010)
- Rubin Xu, "Aurasium: practical policy enforcement for Android applications", Proceeding of Security'12 Proceedings of the 21st USENIX conference on Security, pp.27~27 (2012)
- "App Report : Attention" (2013)[URL]