A survey of mobile malware in the wild

Authors:
Adrienne Porter Felt;Matthew Finifter;Erika Chin;Steve Hanna;David Wagner
Affiliations:
University of California, Berkeley, Berkeley, CA, USA;University of California, Berkeley, Berkeley, CA, USA;University of California, Berkeley, Berkeley, CA, USA;University of California, Berkeley, Berkeley, CA, USA;University of California, Berkeley, Berkeley, CA, USA
Venue:
Proceedings of the 1st ACM workshop on Security and privacy in smartphones and mobile devices
Year:
2011

Citing 13
Cited 55

The anatomy of Clickbot.A

HotBots'07 Proceedings of the first conference on First Workshop on Hot Topics in Understanding Botnets
Is It Finally Time to Worry about Mobile Malware?

Computer
iPhish: phishing vulnerabilities on consumer electronics

UPSEC'08 Proceedings of the 1st Conference on Usability, Psychology, and Security
Where's that phone?: geolocating IP addresses on 3G networks

Proceedings of the 9th ACM SIGCOMM conference on Internet measurement conference
On cellular botnets: measuring the impact of malicious devices on a cellular network core

Proceedings of the 16th ACM conference on Computer and communications security
On lightweight mobile phone application certification

Proceedings of the 16th ACM conference on Computer and communications security
TaintDroid: an information-flow tracking system for realtime privacy monitoring on smartphones

OSDI'10 Proceedings of the 9th USENIX conference on Operating systems design and implementation
The effectiveness of application permissions

WebApps'11 Proceedings of the 2nd USENIX conference on Web application development
Mobile Security Catching Up? Revealing the Nuts and Bolts of the Security of Mobile Devices

SP '11 Proceedings of the 2011 IEEE Symposium on Security and Privacy
What's clicking what? techniques and innovations of today's clickbots

DIMVA'11 Proceedings of the 8th international conference on Detection of intrusions and malware, and vulnerability assessment
All your droid are belong to us: a survey of current android attacks

WOOT'11 Proceedings of the 5th USENIX conference on Offensive technologies
Measuring pay-per-install: the commoditization of malware distribution

SEC'11 Proceedings of the 20th USENIX conference on Security
SMS of death: from analyzing to attacking mobile phones on a large scale

SEC'11 Proceedings of the 20th USENIX conference on Security

Smartphone security limitations: conflicting traditions

Proceedings of the 2011 Workshop on Governance of Technology, Information, and Policies
An amulet for trustworthy wearable mHealth

Proceedings of the Twelfth Workshop on Mobile Computing Systems & Applications
Defending users against smartphone apps: techniques and future directions

ICISS'11 Proceedings of the 7th international conference on Information Systems Security
Challenges for dynamic analysis of iOS applications

iNetSec'11 Proceedings of the 2011 IFIP WG 11.4 international conference on Open Problems in Network Security
Android permissions: a perspective combining risks and benefits

Proceedings of the 17th ACM symposium on Access Control Models and Technologies
RiskRanker: scalable and accurate zero-day android malware detection

Proceedings of the 10th international conference on Mobile systems, applications, and services
Measuring user confidence in smartphone security and privacy

Proceedings of the Eighth Symposium on Usable Privacy and Security
Android permissions: user attention, comprehension, and behavior

Proceedings of the Eighth Symposium on Usable Privacy and Security
Aurasium: practical policy enforcement for Android applications

Security'12 Proceedings of the 21st USENIX conference on Security symposium
AdSplit: separating smartphone advertising from applications

Security'12 Proceedings of the 21st USENIX conference on Security symposium
Expectation and purpose: understanding users' mental models of mobile app privacy through crowdsourcing

Proceedings of the 2012 ACM Conference on Ubiquitous Computing
How to ask for permission

HotSec'12 Proceedings of the 7th USENIX conference on Hot Topics in Security
Context-centric security

HotSec'12 Proceedings of the 7th USENIX conference on Hot Topics in Security
Security analysis of smartphone point-of-sale systems

WOOT'12 Proceedings of the 6th USENIX conference on Offensive Technologies
I've got 99 problems, but vibration ain't one: a survey of smartphone users' concerns

Proceedings of the second ACM workshop on Security and privacy in smartphones and mobile devices
Fingerprint attack against touch-enabled devices

Proceedings of the second ACM workshop on Security and privacy in smartphones and mobile devices
Understanding and improving app installation security mechanisms through empirical analysis of android

Proceedings of the second ACM workshop on Security and privacy in smartphones and mobile devices
SmartDroid: an automatic system for revealing UI-based trigger conditions in android applications

Proceedings of the second ACM workshop on Security and privacy in smartphones and mobile devices
Mobile data charging: new attacks and countermeasures

Proceedings of the 2012 ACM conference on Computer and communications security
TreeDroid: a tree automaton based approach to enforcing data processing policies

Proceedings of the 2012 ACM conference on Computer and communications security
Security add-ons for mobile platforms

NordSec'12 Proceedings of the 17th Nordic conference on Secure IT Systems
ThinAV: truly lightweight mobile cloud-based anti-malware

Proceedings of the 28th Annual Computer Security Applications Conference
Sweetening android lemon markets: measuring and combating malware in application marketplaces

Proceedings of the third ACM conference on Data and application security and privacy
An online experiment of privacy authorization dialogues for social applications

Proceedings of the 2013 conference on Computer supported cooperative work
Towards a high-level trusted computing API for Android software stack

Proceedings of the 7th International Conference on Ubiquitous Information Management and Communication
Botnet command and control based on Short Message Service and human mobility

Computer Networks: The International Journal of Computer and Telecommunications Networking
MAST: triage for market-scale mobile malware analysis

Proceedings of the sixth ACM conference on Security and privacy in wireless and mobile networks
Tap-Wave-Rub: lightweight malware prevention for smartphones using intuitive human gestures

Proceedings of the sixth ACM conference on Security and privacy in wireless and mobile networks
Android and iOS users' differences concerning security and privacy

CHI '13 Extended Abstracts on Human Factors in Computing Systems
Mobile-sandbox: having a deeper look into android applications

Proceedings of the 28th Annual ACM Symposium on Applied Computing
Supporting visual security cues for WebView-based Android apps

Proceedings of the 28th Annual ACM Symposium on Applied Computing
ADAM: an automatic and extensible platform to stress test android anti-virus systems

DIMVA'12 Proceedings of the 9th international conference on Detection of Intrusions and Malware, and Vulnerability Assessment
MeadDroid: detecting monetary theft attacks in android by DVM monitoring

ICISC'12 Proceedings of the 15th international conference on Information Security and Cryptology
Vetting undesirable behaviors in android apps with permission use analysis

Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security
Secure enrollment and practical migration for mobile trusted execution environments

Proceedings of the Third ACM workshop on Security and privacy in smartphones & mobile devices
Sound and precise malware analysis for android via pushdown reachability and entry-point saturation

Proceedings of the Third ACM workshop on Security and privacy in smartphones & mobile devices
Structural detection of android malware using embedded call graphs

Proceedings of the 2013 ACM workshop on Artificial intelligence and security
FireDroid: hardening security in almost-stock Android

Proceedings of the 29th Annual Computer Security Applications Conference
Launching generic attacks on iOS with approved third-party applications

ACNS'13 Proceedings of the 11th international conference on Applied Cryptography and Network Security
The permission-based malicious behaviors monitoring model for the android OS

ICCSA'13 Proceedings of the 13th international conference on Computational Science and Its Applications - Volume 1
SMS-based one-time passwords: attacks and defense

DIMVA'13 Proceedings of the 10th international conference on Detection of Intrusions and Malware, and Vulnerability Assessment
Flexible and fine-grained mandatory access control on Android for diverse security and privacy policies

SEC'13 Proceedings of the 22nd USENIX conference on Security
WHYPER: towards automating risk assessment of mobile applications

SEC'13 Proceedings of the 22nd USENIX conference on Security
Jekyll on iOS: when benign apps become evil

SEC'13 Proceedings of the 22nd USENIX conference on Security
Privacy disclosure risk: smartphone user guide

International Journal of Mobile Network Design and Innovation
Systematic audit of third-party android phones

Proceedings of the 4th ACM conference on Data and application security and privacy
DroidBarrier: know what is executing on your android

Proceedings of the 4th ACM conference on Data and application security and privacy
Large-scale machine learning-based malware detection: confronting the "10-fold cross validation" scheme with reality

Proceedings of the 4th ACM conference on Data and application security and privacy
User privacy and modern mobile services: are they on the same path?

Personal and Ubiquitous Computing
Dendroid: A text mining approach to analyzing and classifying code structures in Android malware families

Expert Systems with Applications: An International Journal
Detecting mobile malware threats to homeland security through static analysis

Journal of Network and Computer Applications
The company you keep: mobile malware infection rates and inexpensive risk indicators

Proceedings of the 23rd international conference on World wide web
Flying over Mobile Clouds with Security Planes: Select Your Class of SLA for End-to-End Security

UCC '13 Proceedings of the 2013 IEEE/ACM 6th International Conference on Utility and Cloud Computing
Generating Lightweight Behavioral Signature for Malware Detection in People-Centric Sensing

Wireless Personal Communications: An International Journal
DECAF: detecting and characterizing ad fraud in mobile apps

NSDI'14 Proceedings of the 11th USENIX Conference on Networked Systems Design and Implementation

Quantified Score

Hi-index	0.00

Visualization

Abstract

Mobile malware is rapidly becoming a serious threat. In this paper, we survey the current state of mobile malware in the wild. We analyze the incentives behind 46 pieces of iOS, Android, and Symbian malware that spread in the wild from 2009 to 2011. We also use this data set to evaluate the effectiveness of techniques for preventing and identifying mobile malware. After observing that 4 pieces of malware use root exploits to mount sophisticated attacks on Android phones, we also examine the incentives that cause non-malicious smartphone tinkerers to publish root exploits and survey the availability of root exploits.