Detection of malicious applications on Android OS

  • Authors:
  • Francesco Di Cerbo;Andrea Girardello;Florian Michahelles;Svetlana Voronkova

  • Affiliations:
  • Center for Applied Software Engineering, Free University of Bolzano-Bozen, Bolzano-Bozen, Italy;Information Management, ETH Zurich, Zurich, Switzerland;Information Management, ETH Zurich, Zurich, Switzerland;Center for Applied Software Engineering, Free University of Bolzano-Bozen, Bolzano-Bozen, Italy

  • Venue:
  • IWCF'10 Proceedings of the 4th international conference on Computational forensics
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

The paper presents a methodology for mobile forensics analysis, to detect "malicious" (or "malware") applications, i.e., those that deceive users hiding some of their functionalities. This methodology is specifically targeted for the Android mobile operating system, and relies on its security model features, namely the set of permissions exposed by each application. The methodology has been trained on more than 13,000 applications hosted on the Android Market, collected with AppAware. A case study is presented as a preliminary validation of the methodology.