Reference : POSTER: Detection of Information Leaks via Reflection in Android Apps
Scientific congresses, symposiums and conference proceedings : Paper published in a book
Engineering, computing & technology : Computer science
http://hdl.handle.net/10993/31609
POSTER: Detection of Information Leaks via Reflection in Android Apps
English
Gajrani, Jyoti []
Li, Li mailto [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
Laxmi, Vijay []
Tripathi, Meenakshi []
Singh Gaur, Manoj []
Conti, Mauro []
2017
The 2017 ACM on Asia Conference on Computer and Communications Security (AsiaCCS 2017)
Yes
No
International
The 2017 ACM on Asia Conference on Computer and Communications Security (AsiaCCS 2017)
from 02-04-2017 to 06-04-2017
[en] Reflection is a language feature which allows to analyze and transform the behavior of classes at the runtime. Reflection is used for software debugging and testing. Malware authors can leverage reflection to subvert the malware detection by static analyzers. Reflection initializes the class, invokes any method of class, or accesses any field of class. But, instead of utilizing usual programming language syntax, reflection passes classes/methods etc. as parameters to reflective APIs. As a consequence, these parameters can be constructed dynamically or can be encrypted by malware. These cannot be detected by state-of-the-art static tools. We propose EspyDroid, a system that combines dynamic analysis with code instrumentation for a more precise and automated detection of malware employing reflection. We evaluate EspyDroid on 28 benchmark apps employing major reflection categories. Our technique show improved results over FlowDroid via detection of additional undetected flows. These flows have potential to leak sensitive and private information of the users, through various sinks.
Researchers ; Professionals ; Students ; General public ; Others
http://hdl.handle.net/10993/31609

File(s) associated to this reference

Fulltext file(s):

FileCommentaryVersionSizeAccess
Limited access
gajrani2017poster.pdfPublisher postprint616.13 kBRequest a copy

Bookmark and Share SFX Query

All documents in ORBilu are protected by a user license.