Scribd
Upload
173 views

An Android Application Sandbox System For Suspicious Software Detection

This document discusses an Android application sandbox system for detecting suspicious software. It describes how sandboxes can provide security and privacy benefits by isolating applications. The system uses static and dynamic analysis on applications through emulation to detect malware signatures and anomalous behavior.

Uploaded by

amey
Copyright
© Attribution Non-Commercial (BY-NC)
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
173 views

An Android Application Sandbox System For Suspicious Software Detection

This document discusses an Android application sandbox system for detecting suspicious software. It describes how sandboxes can provide security and privacy benefits by isolating applications. The system uses static and dynamic analysis on applications through emulation to detect malware signatures and anomalous behavior.

Uploaded by

amey
Copyright
© Attribution Non-Commercial (BY-NC)
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
You are on page 1/ 14

An Android Application Sandbox System for Suspicious Software Detection

An Android Application Sandbox System for Suspicious Software Detection

Index
Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of Android Sandbox Hard Disk with Sandbox and without Sandbox Flow of an Application Update Benefits of an Isolated Sandbox Famigo Sandbox Android Application Conclusion Future Work

2 An Android Application Sandbox System for Suspicious Software Detection

Abstract
Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work

Smartphone's popularity

Android A newer operating system


An Android Application Sandbox - Analysis

Providing Efficiency to Classical anti-virus applications

3 An Android Application Sandbox System for Suspicious Software Detection

Introduction
Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work Anti-virus Research

Android Emulator
Other Sandboxes Signature for a new Malware Why android application are preferred?

4 An Android Application Sandbox System for Suspicious Software Detection

Smartphone Security
Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work Share of Smartphones

Manufacturer provides tools


Smartphone Security has its own specifics Mobile Network

Smartphone's - A viable target to Attackers

5 An Android Application Sandbox System for Suspicious Software Detection

An application installed on your phone can have access to the following information. It reminds you of all those changes that the application can make to your system.

An Android Application Sandbox System for Suspicious Software Detection

Sandboxing & Analysis


Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work Signatures

Sandboxing
User space Kernel space Static Analysis Dynamic Analysis

7 An Android Application Sandbox System for Suspicious Software Detection

APK

Static Analysis

AndroidManifest.xml classes.desc

- uncompress APK - disassemble APK - search for patterns

Logfile

Resources
pictures
Dynamic Analysis

layout.xml
- install APK - execute APK - generate input on APK

libraries (.so)

Logfile

Android Emulator
8

An Android Application Sandbox System for Suspicious Software Detection

Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work

Hard Disk - with Sandbox and without Sandbox

An Android Application Sandbox System for Suspicious Software Detection

The Flow of an Application Update


Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work

10

An Android Application Sandbox System for Suspicious Software Detection

Benefits of an Isolated Sandbox


Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work Secure Web Browsing.

Enhanced Privacy.
Secure E-mail. Stays Lean.

11

An Android Application Sandbox System for Suspicious Software Detection

Famigo Sandbox Android Application


Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work

12

An Android Application Sandbox System for Suspicious Software Detection

Conclusion
Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work Android Emulator to run Android Applications

Pre-check functionality in static analysis


Tracing of calls in dynamic analysis

13 An Android Application Sandbox System for Suspicious Software Detection

Future Work
Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work Better reverse engineering of mobile applications. Real-time malware detection on smartphones. Anomaly detection possible with AAS. Android Honeypot.

14

An Android Application Sandbox System for Suspicious Software Detection

You might also like