DLCDroid是一个安卓应用程序分析框架,用于分析动态加载的代码
Rati Bhan1,2, Rajendra Pamula2, K Susheel Kumar3
1School of Computing Science and Engineering, Galgotias University, Greater Noida, 203201, India.
Scientific reports
|January 26, 2025
概括
使用反射API和动态分析,DLCDroid可以有效地检测Android应用中的动态加载代码 (DLC) 泄露的信息. 这一框架显著改善了恶意软件的检测,在识别敏感数据泄露时超过了95.6%的准确性.
科学领域:
- 计算机科学 计算机科学
- 软件工程 软件工程 软件工程
- 网络安全 网络安全
背景情况:
- 动态加载代码 (DLC) 允许Android应用在运行时扩展功能,但恶意行为者利用此为恶意软件.
- 现有的静态分析工具很难在反模拟环境中检测DLC造成的数据泄露.
- 传统方法不足以识别利用动态代码加载的复杂威胁.
研究的目的:
- 介绍DLCDroid,一个Android应用程序分析框架,旨在打击动态加载代码.
- 提高了通过DLC技术隐藏的信息泄露和恶意行为的检测.
- 提高Android恶意软件分析的可扩展性和自动化.
主要方法:
- DLCDroid使用反射API和动态代码插入用于API挂来分析应用程序行为.
- 结合静态和动态分析技术来发现隐藏的恶意活动.
- 集成基于事件的触发解决方案,用于自动化和可扩展的分析.
主要成果:
- DLCDroid显著改善了反射API引起的敏感信息泄漏的检测,达到95.6%以上的准确性.
- 有效地识别可疑行为,仅通过静态分析就无法发现.
- 与最先进的方法相比,在检测DLC相关威胁方面表现出卓越的性能.
结论:
- DLCDroid提供了一个强大的解决方案,用于分析Android应用程序中的动态加载代码.
- 该框架通过暴露隐藏的恶意行为来增强复杂恶意软件的检测.
- DLCDroid提供了一个可扩展和自动化的方法来进行移动应用程序安全分析.
相关概念视频
01:18Assembly of Cytoskeletal Filaments
16.9K
Cytoskeletal filaments are polymeric forms of smaller protein subunits. However, individual cytoskeletal filaments may easily disassemble or associate with other similar filaments to form rigid structures. Microfilaments, made of actin monomers, rely on actin-binding proteins to form bundles and create networks of individual actin filaments. Microtubules rely on microtubule-associated proteins (MAPs) to form sturdy cylindrical structures. However, the proteins involved in forming complex...
16.9K
01:13Mass Analyzers: Overview
569
The mass analyzer is a crucial component of the mass spectrometer. In the ionization chamber, the vaporized sample is bombarded with a high-energy electron beam to generate a radical cation and further fragment into neutral molecules, radicals, and cations. A series of negatively charged accelerator plates accelerate the cations into the mass analyzer. The mass analyzer separates ions according to their mass-to-charge (m/z) ratios and then directs them to the detector. The common types of mass...
569
01:12Differential Leveling
132
Differential leveling is a precise method in surveying used to determine the elevation difference between two points. Its primary goal is to establish accurate vertical measurements to create level surfaces or grade lines critical for designing and constructing infrastructures such as roads, bridges, and buildings.The procedure for differential leveling begins with setting up and leveling the instrument at a point where the benchmark can be seen. The level rod is held on the benchmark (BM), and...
132
01:16Statically Indeterminate Problem Solving
356
Statically indeterminate problems are those where statics alone can not determine the internal forces or reactions. Consider a structure comprising two cylindrical rods made of steel and brass. These rods are joined at point B and restrained by rigid supports at points A and C. Now, the reactions at points A and C and the deflection at point B are to be determined. This rod structure is classified as statically indeterminate as the structure has more supports than are necessary for maintaining...
356
01:30Assembly of Signaling Complexes
5.7K
Multiprotein signaling complexes are formed in a dynamic process involving protein-protein interactions at the cytoplasmic domain of transmembrane receptors or enzymatic and non-enzymatic proteins associated with the receptor. These complexes ensure the activation and propagation of intracellular signals that regulate cell functions.
Interaction domains in cell signaling
Interaction domains recognize exposed features of their binding partners containing post-translationally modified sequences,...
Interaction domains in cell signaling
Interaction domains recognize exposed features of their binding partners containing post-translationally modified sequences,...
5.7K
01:25Interpreting Run Charts
82
Run charts, essentially line graphs plotted over time, serve as fundamental yet effective tools for process analysis. They chronicle data sequentially, facilitating the identification of trends, shifts, or cyclical movements. This graphical representation is instrumental in determining whether a process is stable or exhibits signs of potential instability indicative of special cause variation. In the healthcare domain, run charts depict infection rates over time, enabling hospitals to monitor...
82