An integrated static detection and analysis framework for android

摘要: Abstract The security and privacy issues of android system have attracted a lot attention from both industry academia in recent years. Static detection is one typical method to analyze malicious code. However, existing single static can introduce high false alarm rate only appropriate for limited scope. In this paper, we propose an integrated framework, which consists four layers filtering mechanisms, that is, the message digest (MD5) values, combination permissions, dangerous intention, respectively. An intuitive threat-degree model proposed especially on permissions detection. Furthermore, implement prototype ASE validate its feasibility, performance scalability. A comprehensive evaluation shows framework has obvious advantages efficiency, granularity, layers, correctness.