Enhancing security of linux-based android devices

摘要: Our daily lives become more and dependent upon smartphones due to their increased capabilities. Smartphones are used in various ways from payment systems assisting the of elderly or disabled people. Security threats for these devices increasingly dangerous since there is still a lack proper security tools protection. Android emerges as an open smartphone platform which allows modification even on operating system level. Therefore, third-party developers have opportunity develop kernel-based low-level not normal platforms. quickly gained its popularity among beyond it bases Java top "open" Linux comparison former proprietary platforms very restrictive SDKs corresponding APIs. Symbian OS example, holding greatest market share all OSs, was closing critical APIs common introduced application certification. This done this main target malwares past. In fact, than 290 designed appeared July 2004 2008. Android, turn, promises be completely source. Together with Linux-based OpenMoko, may attract malware writers creating malicious applications endangering owners� privacy. work, we present our current results analyzing focus side. limited they also applicable such OpenMoko Neo FreeRunner. contribution work three-fold. First, analyze android framework Linux-kernel check functionalities. We survey wellaccepted mechanisms can increase device security. provide descriptions how adopt kernel, overhead analysis terms resource usage. As released similar Symbian, attention writers. second focuses detection techniques at kernel test applicability existing signature intrusion methods environment. monitoring events kernel; that is, identifying log file, file network activity events, devising efficient monitor them third involves initial mechanism basing static function call analysis. identified approximately 105 Executable Linking Format (ELF) executables installed side Android. perform statistical calls by applications. The compared newly detecting significant differences. Additionally, certain indicate activity. simple decision tree deciding suspiciousness application. first step towards Android-based devices.