Static-analysis-based event input generation approach for Android application

Yi-lin YE; Zhen-ji ZHOU; Zheng HONG; Hui-ying YAN; Li-fa WU

doi:10.11959/j.issn.2096-109x.2017.00169

您当前的位置：

首页 >

文章列表页 >

Static-analysis-based event input generation approach for Android application

Papers | 更新时间：2024-06-03

- Static-analysis-based event input generation approach for Android application
- Chinese Journal of Network and Information Security Vol. 3, Issue 6, Pages: 21-32(2017)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2017.00169
  CLC： TP393
- Online First：2017-06，
  
  Published：15 June 2017
- 稿件说明：
移动端阅览
Yi-lin YE, Zhen-ji ZHOU, Zheng HONG, et al. Static-analysis-based event input generation approach for Android application[J]. Chinese Journal of Network and Information Security, 2017, 3(6): 21-32.
DOI：

Yi-lin YE, Zhen-ji ZHOU, Zheng HONG, et al. Static-analysis-based event input generation approach for Android application[J]. Chinese Journal of Network and Information Security, 2017, 3(6): 21-32. DOI： 10.11959/j.issn.2096-109x.2017.00169.

摘要

提出了一种基于静态分析的Android应用动态分析事件输入生成方法。以组件间调用图和单个组件内部系统依赖图为基础，提取组件内部安全相关回调方法依赖的事件输入，并设计了一种事件输入算法，自动生成Android应用运行时依赖的事件输入。实验结果表明，相比已有工作，所提方法能够达到更高的权限方法和基本组件覆盖率，覆盖更多安全相关的执行路径，有助于动态分析过程中收集更多安全相关的运行时行为。

Abstract

A static-analysis-based event input generation approach for Android applications was proposed.Based on the inter-component call graph and the system dependence graph of single component

the event inputs that security-related callbacks depend on were extracted.Furthermore

an event input algorithm was designed to automatically generate event inputs according to Android application runtime.The experimental results show that the proposed method can achieve higher coverage of permission methods and basic components

which can cover more security-related execution paths and help to collect more security-related runtime behaviors during the process of dynamic analysis.

关键词

Keywords

references

XIA M , GONG L , LYU Y , et al . Effective real-time android application auditing [C ] // IEEE Symposium on Security and Privacy . 2015 : 899 - 914 .

BIANCHI A , FRATANTONIO Y , KRUEGEL C , et al . NJAS:sandboxing unmodified applications in non-rooted devices running stock Android [C ] // ACM CCS Workshop on Security and Privacy in Smartphones and Mobile Devices . 2015 : 27 - 38 .

BACKES M , BUGIEL S , HAMMER C , et al . Boxify:full-fledged app sandboxing for stock android [C ] // Usenix Conference on Security Symposium . 2015 : 691 - 706 .

AFONSO V M , AMORIM M F D , GRÉGIO A R A , et al . Identifying Android malware using dynamically obtained features [J ] . Journal of Computer Virology and Hacking Techniques , 2015 , 11 ( 1 ): 9 - 17 .

QIU L , ZHANG Z , SHEN Z , et al . AppTrace:dynamic trace on Android devices [C ] // IEEE International Conference on Communications . 2015 : 7145 - 7150 .

Monkey [EB/OL ] . https://developer.android.com/studio/test/monkey.html https://developer.android.com/studio/test/monkey.html .

MonkeyRunner [EB/OL ] . https://developer.android.com/studio/test/monkeyrunner/ index.html https://developer.android.com/studio/test/monkeyrunner/ index.html .

李必信 , 李宣东 , 郑国梁 . 一种系统依赖图的面向对象扩充方案 [J ] . 软件学报 , 2001 , 12 ( 2 ): 241 - 248 .

LI B X , LI X D , ZHENG G L . An object-oriented extension ap-proach for system dependent graph [J ] . Journal of Software , 2001 , 12 ( 2 ): 241 - 248 .

杜林 , 江海燕 . 计算面向对象程序切片技术研究 [J ] . 山东大学学报(工学版) , 2008 , 38 ( 6 ): 41 - 47 .

DU L , JIANG H Y . Research on slicing technology of object oriented program [J ] . Journal of Shandong University(Engineering Science) , 2008 , 38 ( 6 ): 41 - 47 .

AU K W Y , ZHOU Y F , HUANG Z , et al . PScout:analyzing the Android permission specification [C ] // The ACM Conference on Computer and Communications Security . 2012 : 217 - 228 .

MOURA L D , BJORNER N . Z3:an efficient SMT solver [J ] . Lecture Notes in Computer Science , 2008 , 4963 : 337 - 340 .

Apktool [EB/OL ] . http://www.softpedia.com/get/Programming/Debuggers-Decompilers-Dissasemblers/ ApkTool.shtml http://www.softpedia.com/get/Programming/Debuggers-Decompilers-Dissasemblers/ ApkTool.shtml .

Androguard [EB/OL ] . https://github.com/androguard/androguard https://github.com/androguard/androguard .

CHOI S , BIJOU M , SUN K , et al . API tracing tool for Android-based mobile devices [J ] . International Journal of Information and Education Technology , 2015 , 5 ( 6 ): 460 - 465 .

MACHIRY A , TAHILIANI R , NAIK M . Dynodroid:an input generation system for Android apps [C ] // Joint Meeting on Foundations of Software Engineering . 2013 : 422 - 434 .

HU C , NEAMTIU I . Automating GUI testing for Android applications [C ] // The International Workshop on Automation of Software Test . 2011 : 77 - 83 .

AMALFITANO D , FASOLINO A R , TRAMONTANA P , et al . Using GUI ripping for automated testing of Android applications [C ] // The 27th IEEE/ACM International Conference on Automated Software Engineering,IEEE Computer Society . 2012 : 258 - 261 .

YANG W , PRASAD M R , XIE T . A grey-box approach for automated GUI-model generation of mobile applications [C ] // The International Conference on Fundamental Approaches To Software Engineering . 2013 : 250 - 265 .

Robotium [EB/OL ] . tps://github.com/RobotiumTech/robotium tps://github.com/RobotiumTech/robotium .

CHOI W , NECULA G , SEN K . Guided GUI testing of Android Apps with minimal restart and approximate learning [J ] . ACM Sigplan Notices , 2013 , 48 ( 10 ): 623 - 640 .

AZIM T , NEAMTIU I . Targeted and depth-first exploration for systematic testing of Android Apps [J ] . ACM Sigplan Notices , 2013 , 48 ( 10 ): 641 - 660 .

RASTOGI V , CHEN Y , ENCK W . Appsplayground:automatic security analysis of smartphone applications [C ] // ACM Conference on Data and Application Security and Privacy . 2013 : 209 - 220 .

VEEN V V D . Dynamic analysis of Android malware [J ] . Internet ＆Web Technology Master thesis,VU University Amsterdam , 2013 .

LINDORFER M , NEUGSCHWANDTNER M , WEICHSELBAUM L , et al . ANDRUBIS- -1,000,000 apps later:a view on current Android malware behaviors [C ] // The 3rd International Workshop on Building Analysis Datasets and Gathering Experience Returns for Security,IEEE Computer Society . 2014 : 3 - 17 .

Views

2418

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Survey on malicious code dynamic analysis evasion and anti-evasion techniques

Accelerating cryptographic computation with parallel computing mechanisms in Android platform

Malware prediction technique based on program gene

Review of side-channel privacy inference of Android mobile devices

Anti-obfuscation Android application similarity detection method based on API call

Related Author

ZHOU Yilin

YANG Xiuzhang

PENG Guojun

WANG Chenyang

Guandong DI

Donghe NI

Weibing CAO

Ning FANG

Related Institution

Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education

School of Cyber Science and Engineering, Wuhan University

State Key Laboratory of Public Big Data, Guizhou University

Beijing Bangcle Security Technology Co.,Ltd.

Beijing Institute of Electronics Technology and Application

⁰