IIT Home Page CNR Home Page

I Find Your Behavior Disturbing: Static and Dynamic App Behavioral Analysis for Detection of Android Malware

Malicious Android applications are currently the biggest threat in the scope of mobile security. To cope with their exponential growth and with their deceptive and hideous behaviors, static analysis signature based approaches are not enough to timely detect and tackle brand new threats such as polymorphic and composition malware. This work presents BRIDEMAID, a novel framework for analysis of Android apps’ behavior, which exploits both a static and dynamic approach to detect malicious apps directly on mobile devices. The static analysis is based on n-grams matching to statically recognize malicious app execution patterns. The dynamic analysis is instead based on multi-level monitoring of device, app and user behavior to detect and prevent at runtime malicious behaviors. The framework has been tested against 2794 malicious apps reporting a detection accuracy of 99,7% and a negligible false positive rate, tested on a set of 10k genuine apps.

14th International Conference on Privacy, Security and Trust (PST 2016), Auckland, New Zealand, 2016

External authors: Visaggio Corrado Aaron (Dipartimento di Ingegneria, Università degli Studi del Sannio)
IIT authors:

Type: Contributo in atti di convegno
Field of reference: Computer Science & Engineering

File: main.pdf

Activity: Sicurezza di dispositivi mobili