무결성 검증 모듈을 사용한 안드로이드 앱 필터링 기법의 개선

Abstract

In this paper, we propose a scheme to filter out copyrighted Android applications which are illegally distributed through online internet sites. A previous simple filtering scheme based on the hash value of a classes.dex file has a problem that the previous scheme can be bypassed by a straightforward change like modifying the hash value. To address the problem, we introduce a new module to verify the integrity of the hash value and certificate information for each Android application. The integrity verification module uses two kinds of information inside an APK file. The first information is a hash value of manifest.mf where we can determine whether the hash value is modified or not by comparing it with one initially stored a database. The second information is a certificate of cert.rsa which can be used to determine if the target file is repackaged or not. Through some experiments, we show that the proposed scheme can overcome the limitation of the previous one and evaluate performance of our scheme.