Using static analysis for automatic assessment and mitigation of unwanted and malicious activities within Android applications

摘要: In the last decade, smartphones have gained widespread usage. Since advent of online application stores, hundreds thousands applications become instantly available to millions smart-phone users. Within Android ecosystem, security is governed by digital signatures and a list coarse-grained permissions. However, this mechanism not fine-grained enough provide user with sufficient means control applications' activities. Abuse highly sensible private information such as phone numbers without users' notice result. We show that there high frequency privacy leaks even among widely popular applications. Together fact majority users are proficient in computer security, presents challenge engineers developing solutions for platform. Our contribution twofold: first, we propose service which able assess Market via static analysis detailed, but readable reports user. Second, describe mitigate threats automated reverse-engineering refactoring binary packages according preferences.