An Android Application Sandbox System for Suspicious Software Detection

An Android Application Sandbox System for Suspicious Software Detection

Index
Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of Android Sandbox Hard Disk with Sandbox and without Sandbox Flow of an Application Update Benefits of an Isolated Sandbox Famigo Sandbox Android Application Conclusion Future Work

2 An Android Application Sandbox System for Suspicious Software Detection

Abstract
Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work

Smartphone's popularity

Android A newer operating system

An Android Application Sandbox - Analysis

Providing Efficiency to Classical anti-virus applications

3 An Android Application Sandbox System for Suspicious Software Detection

Introduction
Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work Anti-virus Research

Android Emulator
Other Sandboxes Signature for a new Malware Why android application are preferred?

4 An Android Application Sandbox System for Suspicious Software Detection

Smartphone Security
Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work Share of Smartphones

Manufacturer provides tools

Smartphone Security has its own specifics Mobile Network

Smartphone's - A viable target to Attackers

5 An Android Application Sandbox System for Suspicious Software Detection

An application installed on your phone can have access to the following information. It reminds you of all those changes that the application can make to your system.

An Android Application Sandbox System for Suspicious Software Detection

Sandboxing & Analysis

Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work Signatures

Sandboxing
User space Kernel space Static Analysis Dynamic Analysis

7 An Android Application Sandbox System for Suspicious Software Detection

APK

Static Analysis

AndroidManifest.xml classes.desc

- uncompress APK - disassemble APK - search for patterns

Logfile

Resources
pictures
Dynamic Analysis

layout.xml
- install APK - execute APK - generate input on APK

libraries (.so)

Logfile

Android Emulator
8

An Android Application Sandbox System for Suspicious Software Detection

Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work

Hard Disk - with Sandbox and without Sandbox

An Android Application Sandbox System for Suspicious Software Detection

The Flow of an Application Update

Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work

10

An Android Application Sandbox System for Suspicious Software Detection

Benefits of an Isolated Sandbox

Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work Secure Web Browsing.

Enhanced Privacy.
Secure E-mail. Stays Lean.

11

An Android Application Sandbox System for Suspicious Software Detection

Famigo Sandbox Android Application

Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work

12

An Android Application Sandbox System for Suspicious Software Detection

Conclusion
Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work Android Emulator to run Android Applications

Pre-check functionality in static analysis

Tracing of calls in dynamic analysis

13 An Android Application Sandbox System for Suspicious Software Detection

Future Work
Abstract Introduction Smartphone Security Example Sandboxing & Analysis Design of AS Hard Disk Flow Benefits Famigo Conclusion Future Work Better reverse engineering of mobile applications. Real-time malware detection on smartphones. Anomaly detection possible with AAS. Android Honeypot.

14

An Android Application Sandbox System for Suspicious Software Detection