Formal Methods Meet Mobile Code Obfuscation Identification of Code Reordering Technique

摘要: Android represents the most widespread mobile environment. This increasing diffusion is reason why attackers are attracted to develop malware targeting this platform. Malware writers usually use code obfuscation techniques in order evade current antimalware detection and generate new variants. These make programs harder understand they change signature of application making ineffective extraction work. We propose a method based on formal methods able identify whether obfuscated. In preliminary work we one technique: reordering. test our real-world dataset composed by trusted ransomware samples, obtaining encouraging results.