Dergiler / Politeknik Dergisi / 2017 / Cilt: 20 - Sayı: 1

Android Mobil Uygulamalar için İzin Karşılaştırma Tabanlı Kötücül Yazılım Tespiti

Permisson Comparison Based Malware Detection System for Android Mobile Applications

Sayfa
175–189
DOI
—
🏛️Bu makalenin bibliyografik verileri ve tam metin bağlantısı DergiPark üzerinden sağlanmıştır.
DergiPark Kaydı ↗
✨

Yapay Zeka Hızlı Bakış & Çıkarımlar

AI Insight
⚡ TL;DR(1 Cümlede Hızlı Çıkarım)

Uygulamalar, yüklendikleri

📌 3 Maddede Bu Makale

🎯
Amaç & Hipotez:Mobil uygulamalar izin tabanlı modelleri sayesinde kendi güvenlik ve gizlilik modellerini oluştururlar.
📊
Temel Bulgular & Veri:Mobil uygulamalar izin tabanlı modelleri sayesinde kendi güvenlik ve gizlilik modellerini oluştururlar.
💡
Sonuç & Katkı:Uygulamalar, yüklendikleri
🔬Tür:Modelleme & Sayısal Simülasyon
📍Kapsam:Genişletilmiş Akademik Örneklem
⚙️Değişkenler:Android · İzin Tabanlı · Güvenlik

Özet

Mobil uygulamalar izin tabanlı modelleri sayesinde kendi güvenlik ve gizlilik modellerini oluştururlar. Uygulamalar, yüklendikleri

Abstract

Mobile applications create their own security and privacy models through permission based models. Applications, if they requireto access any sensitive data in mobile devices that they are downloaded on, in order to do the needed system call for this access,they have to define only required permissions. However, some applications may request extra permissions which they do not needand may use these permissions for suspicious database access they do later. In this study, the aim is to determine those extrarequested permissions and to use this on the security and privacy model. According to the study, through the determined methodology,risk values of applications are determined in the light of pre-determined levels within datasets. It is an approach that usesstatic analysis and code analysis together. According to this approach, the permissions that the applications request and use aredetermined separately and the applications that request extra permissions are discovered. Then, via the produced formula, suspicionvalue of every application is determined and applications are classified as malicious or benignant according to this value. Thisapproach was applied on existing datasets; the results were compared and accuracy level was determined.For Android operatingsystem, it is aimed to determine the malicious applications via this newly developed method and to create a safer Android atmospherefor users.

🔖

Bu Makaleye Atıf Yap

ARSLAN, R. S., DOĞRU, İ. A., BARIŞÇI, N. (2017). Android Mobil Uygulamalar için İzin Karşılaştırma Tabanlı Kötücül Yazılım Tespiti. Politeknik Dergisi, Cilt: 20 - Sayı: 1, 175–189. https://ajindex.com/articles/306513

📄 Tam Metin PDF Okuyucu

📄

PDF görüntüleyici hazırlanıyor...

Kaynakça (12)

  1. Seo S., Gupta A., Sallam A.M., Bertino E., Yim K., “Detecting mobile malware threats to homeland se-curity through static analysis”, Journal of Network and Computer Applications, 38: 43-53, (2014)
  2. Leavitt N., “Mobile phones: the next frontier for hackers?”, IEEE Xplore:Computer, 38: 20-23, (2005)
  3. Shih, D.H., Lin, B., Chiang, H.S., Shih, M.H., “Se-curity aspects of mobile phone virus: a critical sur-vey”, Industrial Management & Data Systems, 108: 478-494, (2008)
  4. Xiaoyan Z., Juan F., Xiujuan W., “Android malware detection based on permissions”, Infor-mation and Communications Technologies (ICT 2014), 2014 International Conference on, Nan-jing, 1-5, (2014)
  5. Geneiatakis D., Fovino I. N., Kounelis I. ve Stir-paro P., “A Permission verification approach for Android mobile applications”, Computer & Secu-rity, 49: 192-205, (2015)
  6. Su M.Y., Chang W.C., “Permission-based Malware Detection Mechanisms for Smart Phones”, Infor-mation Networking(OCOIN) International Confe-rence, Phuket, 449-452, (2014)
  7. Bartel A., Klein J., Le Traon Y., Monperrus M., “Automatically securing permission-based software by reducing the attack surface: an applica-tion to Android”, ASE 2012 Proceedings of the 27th IEEE/ACM International Conference on Automated Software Engineering, New York, 274-277, (2012)
  8. Felt A.P., Chin E., Hanna S., Song D., Wagner D., “Android permissions demystified”, CCS '11 Pro-ceedings of the 18th ACM conference on Compu-ter and communications security, New York, 627-638, (2011)
  9. Rosen S., Qian Z., Mao Z.M., “AppProfiler: a flexible method of exposing privacy-related beha-vior in android applications to end users”, CO-DASPY '13 Proceedings of the third ACM confe-rence on Data and application security and pri-vacy, New York, 221-232, (2013)
  10. Enck W., Gilbert P., Chun B.G., Cox L.P., Jung J., McDaniel P., Sheth A.N., “Appsplayground: an information-flow tracking system for realtime pri-vacy monitoring on smartphones”, OSDI'10 Proce-edings of the 9th USENIX conference on Opera-ting systems design and implementation, Berkeley, 393-407, (2010)
  11. Berthome P., Fecherolle T., Guilloteau N., Lalande J.F., “Repackaging Android Applications for Audi-ting Access to Private Data”, 7th International Conference on Availability, Reliability and Secu-rity. IEEE Computer Society, Prague, 388-396, (2012)
  12. Rastogi V, Chen Y, Enck W., “Appsplayground: automatic security analysis of smartphone applica-tions”, 3rd ACM Conference on Da