Alterdroid : Differential Fault Analysis of Obfuscated Smartphone Malware

摘要: Malware for smartphones has rocketed over the last years. Market operators face challenge of keeping their stores free from malicious apps, a task that become increasingly complex as malware developers are progressively using advanced techniques to defeat detection tools. One such technique commonly observed in recent samples consists hiding and obfuscating modules containing functionality places static analysis tools overlook (e.g., within data objects). In this paper, we describe Alterdroid , dynamic approach detecting hidden or obfuscated components distributed parts an app package. The key idea analyzing behavioral differences between original number automatically generated versions it, where modifications ( faults ) have been carefully injected. Observable terms activities appear vanish modified recorded, resulting differential signature is analyzed through pattern-matching process driven by rules relate different types functionalities with patterns found signature. A thorough justification description proposed model provided. extensive experimental results obtained testing relevant apps support quality viability our proposal.