Catch Me If You Can: Evaluating Android Anti-Malware Against Transformation Attacks

摘要: Mobile malware threats (e.g., on Android) have recently become a real concern. In this paper, we evaluate the state-of-the-art commercial mobile anti-malware products for Android and test how resistant they are against various common obfuscation techniques (even with known malware). Such an evaluation is important not only measuring available defense threats, but also proposing effective, next-generation solutions. We developed DroidChameleon, systematic framework transformation techniques, used it our study. Our results 10 popular applications worrisome: none of these tools techniques. addition, majority them can be trivially defeated by applying slight over little effort authors. Finally, in light results, propose possible remedies improving current state detection devices.