Detecting Symbian OS malware through static function call analysis

摘要: Smartphones become very critical part of our lives as they offer advanced capabilities with PC-like functionalities. They are getting widely deployed while not only being used for classical voice-centric communication. New smartphone malwares keep emerging where most them still target Symbian OS. In the case OS, application signing seemed to be an appropriate measure slowing down malware appearance. Unfortunately, latest examples showed that can bypassed resulting in new outbreak. this paper, we present a novel approach static detection resource-limited mobile environments. This extend currently third-party mechanisms increasing capabilities. work, extract function calls from binaries order apply clustering mechanism, called centroid. method is capable detecting unknown malwares. Our results promising employed mechanism might find at distribution channels, like online stores. Additionally, it seems suitable directly on smartphones (pre-)checking installed applications.