Dynalog: an automated dynamic analysis framework for characterizing android applications

摘要: Android is becoming ubiquitous and currently has the largest share of mobile OS market with billions application downloads from official app market. It also become platform most targeted by malware that are more sophisticated to evade state-of-the-art detection approaches. Many families employ obfuscation techniques in order avoid this may defeat static analysis based Dynamic on other hand be used overcome limitation. Hence paper we propose DynaLog, a dynamic framework for characterizing applications. The provides capability analyse behaviour applications an extensive number features. automated mass characterization apps useful quickly identifying isolating malicious DynaLog leverages existing open source tools extract log high level behaviours, API calls, critical events can explore characteristics application, thus providing extensible detecting malware. evaluated using real samples clean demonstrating its capabilities effective