Androfilter: 유효마켓데이터를 이용한 안드로이드 악성코드 필터
Androfilter: Android Malware Filter using Valid Market Data
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
스마트폰의 화로 다양한 애리이션이 증가하면서, Third party App Market 이나 블랙마켓을 통한 악 성 애리이션 한 격한 증가세에 있다. 본 논문에서는 APK일의 변조여부를 효과으로 검출할 수 있는 검 사 필터인 Androfilter를 제안한다. Androfilter는 부분의 안티바이러스 소트웨어들이 사용하는 수집, 분석, 업데이트 서버등을 사용하지 않고, Google Play를 신뢰 기으로 가정하여 응되는 애리이션의 조회만으로 애리이션의 변조여부를 단 한다. 실험 결과에 따르면 변조된 애리이션을 감지함으로 보고되지 않은 신종 악성코드를 차단할 수 있다.
Abstract
As the popularization of smartphone increases the number of various applications, the number of malicious applications also grows rapidly through the third party App Market or black market. This paper suggests an investigation filter, Androfilter, that detects the fabrication of APK file effectively. Whereas the most of antivirus software uses a separate server to collect, analyze, and update malicious applications, Androfilter assumes Google Play as the trusted party and verifies integrity of an application through a simple query to Google Play. Experiment results show that Androfilter blocks brand new malicious applications that have not been reported yet as well as known malicious applications.
참고문헌 (17)
- "Worldwide Smartphone Usage to Grow 25% in 2014" (2014)[URL]
- "Ghost-Hunting With Anti-Virus" (2014)[URL]
- Sahs, Justin, "A machine learning approach to android malware detection", Intelligence and Security Informatics Conference (EISIC), 2012 European, pp.141~147 (2012)
- Burguera, Iker, "Crowdroid: behavior-based malware detection system for android", Proceedings of the 1st ACM workshop on Security and privacy in smartphones and mobile devices, pp.15~26 (2011)
- Zhou, Yajin, "Dissecting android malware:Characterization and evolution", Security and Privacy (SP), 2012 IEEE Symposium on, pp.95~109 (2012)
- Wu, Dong-Jie, "Droidmat: Android malware detection through manifest and api calls tracing", Information Security (Asia JCIS), 2012Seventh Asia Joint Conference on, pp.62~69 (2012)
- Yan, Lok-Kwong, "DroidScope: Seamlessly Reconstructing the OS and Dalvik Semantic Views for Dynamic Android Malware Analysis", USENIX security symposium, pp.569~584 (2012)
- Isohara, "Kernel-based behavior analysis for android malware detection", Computational Intelligence and Security (CIS), 2011Seventh International Conference on, pp.1011~1015 (2011)
- Grace, Michael, "Riskranker: scalable and accurate zero-day android malware detection", Proceedings of the 10th international conference on Mobile systems, applications, and services, pp.281~294 (2012)
- Zhou, Yajin, "Hey, You, Get Off of My Market: Detecting Malicious Apps in Official and Alternative Android Markets", NDSS (2012)
- 박성수, "요약기반 대규모 소스 코드 유사성 평가", 정보과학회논문지 : 시스템 및 이론, 39(6), pp.393~397 (2012), 한국정보과학회
- Soongchunhang University Industry Academy Cooperation Foundation, "Method for Detecting Malicious Code by Permission Management", Korea Patent 1013866050000, ~ (2014)
- Jang, Jae-wook, "Andro-profiler:anti-malware system based on behavior profiling of mobile malware", Proceedings of the companion publication of the 23rd international conference on World wide web companion, pp.737~738 (2014), International World Wide Web Conferences Steering Committee
- "Platform Versions" (2015)[URL]
- Sato, Ryo, "Detecting android malware by analyzing manifest files", Proceedings of the Asia-Pacific Advanced Network, 36(2013), pp.23~31 (2013)
- Morrissey, "Protecting users from undesirable content", U.S. Patent Application 13, 2012
- "Anti-Virus Comparative File Detection Test of Malicious Software including false alarm test" (2015)[URL]