Detecting sensitive data leakage via inter-applications on Android using a hybrid analysis technique

被引:4
|
作者
Nguyen Tan Cam [1 ]
Van-Hau Pham [2 ]
Tuan Nguyen [2 ]
机构
[1] Hoa Sen Univ, Ho Chi Minh City, Vietnam
[2] Vietnam Natl Univ, Univ Informat Technol, Ho Chi Minh City, Vietnam
来源
CLUSTER COMPUTING-THE JOURNAL OF NETWORKS SOFTWARE TOOLS AND APPLICATIONS | 2019年 / 22卷 / Suppl 1期
关键词
Android security; Hybrid analysis; Inter-application communication; Sensitive data leakage detection; MALWARE DETECTION;
D O I
10.1007/s10586-017-1260-2
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
In this study, we present the uitHyDroid system, which allows the detection of sensitive data leakage via multi-applications using hybrid analysis. uitHyDroid uses static analysis to collect user interface elements that must interact to illuminate possible sensitive data flows. In addition, dynamic analysis is used to capture inter-application communications to link partial sensitive data flows from static analysis. This approach is faster than using only dynamic analysis. In this study, we use hooking technology to conduct dynamic analysis phase emulator modification. The experimental results show that the proposed system can detect most sensitive data leakages for both our dataset and real-world applications.
引用
收藏
页码:1055 / 1064
页数:10
相关论文
共 45 条
  • [21] Detecting personally identifiable information transmission in android applications using light-weight static analysis
    Wongwiwatchai, Nattanon
    Pongkham, Phannawhat
    Sripanidkulchai, Kunwadee
    COMPUTERS & SECURITY, 2020, 99
  • [22] Detecting the Inconsistency between Android Apps' Data Collection and Google Play's Data Safety Using Static Analysis
    Baalous, Rawan
    Althobaiti, Alanoud
    Alyoubi, Dareen
    Alzahrani, Rama
    Aljohani, Mona
    CYBERNETICS AND INFORMATION TECHNOLOGIES, 2025, 25 (01) : 110 - 125
  • [23] AppScalpel: Combining static analysis and outlier detection to identify and prune undesirable usage of sensitive data in Android applications
    Meng, Zhaoyi
    Xiong, Yan
    Huang, Wenchao
    Qin, Lei
    Jin, Xin
    Yan, Hongbing
    NEUROCOMPUTING, 2019, 341 : 10 - 25
  • [24] Combining static and dynamic data flow analysis: a hybrid approach for detecting data leaks in Java']Java applications
    Mongiovi, M.
    Giannone, G.
    Fornaia, A.
    Pappalardo, G.
    Tramontana, E.
    30TH ANNUAL ACM SYMPOSIUM ON APPLIED COMPUTING, VOLS I AND II, 2015, : 1573 - 1579
  • [25] Predictive Analysis of Medical Data using a Hybrid Machine Learning Technique
    Rajawat, Pushpendra Singh
    Gupta, Deepak Kumar
    Rathore, Santosh Singh
    Singh, Avtar
    2018 FIRST INTERNATIONAL CONFERENCE ON SECURE CYBER COMPUTING AND COMMUNICATIONS (ICSCCC 2018), 2018, : 228 - 233
  • [26] VAnDroid: A framework for vulnerability analysis of Android applications using a model-driven reverse engineering technique
    Nirumand, Atefeh
    Zamani, Bahman
    Ladani, Behrouz Tork
    SOFTWARE-PRACTICE & EXPERIENCE, 2019, 49 (01): : 70 - 99
  • [27] A data mining technique for detecting malignant mesothelioma cancer using multiple regression analysis
    Alali, Abdulla Mousa Falah
    Padmaja, Dhyaram Lakshmi
    Soni, Mukesh
    Khan, Muhammad Attique
    Khan, Faheem
    Ofori, Isaac
    OPEN LIFE SCIENCES, 2023, 18 (01):
  • [28] Analysis of uncertainty measure using unified hybrid censored data with applications
    Helmy, Baria A.
    Hassan, Amal S.
    El-Kholy, Ahmed K.
    JOURNAL OF TAIBAH UNIVERSITY FOR SCIENCE, 2021, 15 (01): : 1130 - 1143
  • [29] Data transmission applications via low voltage power lines using OFDM technique
    Hensen, C
    1998 IEEE 5TH INTERNATIONAL SYMPOSIUM ON SPREAD SPECTRUM TECHNIQUES AND APPLICATIONS - PROCEEDINGS, VOLS 1-3, 1998, : 210 - 214
  • [30] A novel technique for detecting repacked android applications using constant key point selection-based hashing and limited binary pattern texture feature extraction
    Khan, M. A. Rahim
    Jain, Manoj Kumar
    JOURNAL OF AMBIENT INTELLIGENCE AND HUMANIZED COMPUTING, 2021,