Journals / Politeknik Dergisi / 2017 / Cilt: 20 - Sayı: 1

Permisson Comparison Based Malware Detection System for Android Mobile Applications

Android Mobil Uygulamalar için İzin Karşılaştırma Tabanlı Kötücül Yazılım Tespiti

Pages
175–189
DOI
—
🏛️Bibliographic metadata and full text access for this article are provided via DergiPark.
DergiPark Record ↗
✨

AI Summary & Key Takeaways

AI Insight
⚡ TL;DR(Too Long; Didn't Read)

Thisapproach was applied on existing datasets; the results were compared and accuracy level was determined.For Android operatingsystem, it is aimed to determine the malicious applications via this newly developed method and to create a safer Android atmospherefor users.

📌 3 Key Takeaways

🎯
Objective & Hypothesis:Mobile applications create their own security and privacy models through permission based models.
📊
Key Findings & Data:According to this approach, the permissions that the applications request and use aredetermined separately and the applications that request extra permissions are discovered.
💡
Conclusion & Impact:Thisapproach was applied on existing datasets; the results were compared and accuracy level was determined.For Android operatingsystem, it is aimed to determine the malicious applications via this newly developed method and to create a safer Android atmospherefor users.
🔬Design:Modeling & Simulation
📍Scope:Comprehensive Sample
⚙️Variables:Android · İzin Tabanlı · Güvenlik

Abstract

Mobile applications create their own security and privacy models through permission based models. Applications, if they requireto access any sensitive data in mobile devices that they are downloaded on, in order to do the needed system call for this access,they have to define only required permissions. However, some applications may request extra permissions which they do not needand may use these permissions for suspicious database access they do later. In this study, the aim is to determine those extrarequested permissions and to use this on the security and privacy model. According to the study, through the determined methodology,risk values of applications are determined in the light of pre-determined levels within datasets. It is an approach that usesstatic analysis and code analysis together. According to this approach, the permissions that the applications request and use aredetermined separately and the applications that request extra permissions are discovered. Then, via the produced formula, suspicionvalue of every application is determined and applications are classified as malicious or benignant according to this value. Thisapproach was applied on existing datasets; the results were compared and accuracy level was determined.For Android operatingsystem, it is aimed to determine the malicious applications via this newly developed method and to create a safer Android atmospherefor users.

Özet

Mobil uygulamalar izin tabanlı modelleri sayesinde kendi güvenlik ve gizlilik modellerini oluştururlar. Uygulamalar, yüklendikleri

🔖

Cite This Article

ARSLAN, R. S., DOĞRU, İ. A., BARIŞÇI, N. (2017). Permisson Comparison Based Malware Detection System for Android Mobile Applications. Politeknik Dergisi, Cilt: 20 - Sayı: 1, 175–189. https://ajindex.com/articles/306513

📄 Full Text PDF Viewer

📄

PDF görüntüleyici hazırlanıyor...

References (12)

  1. Seo S., Gupta A., Sallam A.M., Bertino E., Yim K., “Detecting mobile malware threats to homeland se-curity through static analysis”, Journal of Network and Computer Applications, 38: 43-53, (2014)
  2. Leavitt N., “Mobile phones: the next frontier for hackers?”, IEEE Xplore:Computer, 38: 20-23, (2005)
  3. Shih, D.H., Lin, B., Chiang, H.S., Shih, M.H., “Se-curity aspects of mobile phone virus: a critical sur-vey”, Industrial Management & Data Systems, 108: 478-494, (2008)
  4. Xiaoyan Z., Juan F., Xiujuan W., “Android malware detection based on permissions”, Infor-mation and Communications Technologies (ICT 2014), 2014 International Conference on, Nan-jing, 1-5, (2014)
  5. Geneiatakis D., Fovino I. N., Kounelis I. ve Stir-paro P., “A Permission verification approach for Android mobile applications”, Computer & Secu-rity, 49: 192-205, (2015)
  6. Su M.Y., Chang W.C., “Permission-based Malware Detection Mechanisms for Smart Phones”, Infor-mation Networking(OCOIN) International Confe-rence, Phuket, 449-452, (2014)
  7. Bartel A., Klein J., Le Traon Y., Monperrus M., “Automatically securing permission-based software by reducing the attack surface: an applica-tion to Android”, ASE 2012 Proceedings of the 27th IEEE/ACM International Conference on Automated Software Engineering, New York, 274-277, (2012)
  8. Felt A.P., Chin E., Hanna S., Song D., Wagner D., “Android permissions demystified”, CCS '11 Pro-ceedings of the 18th ACM conference on Compu-ter and communications security, New York, 627-638, (2011)
  9. Rosen S., Qian Z., Mao Z.M., “AppProfiler: a flexible method of exposing privacy-related beha-vior in android applications to end users”, CO-DASPY '13 Proceedings of the third ACM confe-rence on Data and application security and pri-vacy, New York, 221-232, (2013)
  10. Enck W., Gilbert P., Chun B.G., Cox L.P., Jung J., McDaniel P., Sheth A.N., “Appsplayground: an information-flow tracking system for realtime pri-vacy monitoring on smartphones”, OSDI'10 Proce-edings of the 9th USENIX conference on Opera-ting systems design and implementation, Berkeley, 393-407, (2010)
  11. Berthome P., Fecherolle T., Guilloteau N., Lalande J.F., “Repackaging Android Applications for Audi-ting Access to Private Data”, 7th International Conference on Availability, Reliability and Secu-rity. IEEE Computer Society, Prague, 388-396, (2012)
  12. Rastogi V, Chen Y, Enck W., “Appsplayground: automatic security analysis of smartphone applica-tions”, 3rd ACM Conference on Da