资源描述:
《Hey, You, Get Off of My Market_ Detecting Malicious Apps in Official and Alternative Android Markets》由会员上传分享,免费在线阅读,更多相关内容在学术论文-天天文库。
1、Hey,You,GetOffofMyMarket:DetectingMaliciousAppsinOfficialandAlternativeAndroidMarketsYajinZhouZhiWangWuZhouXuxianJiangDepartmentofComputerScienceNorthCarolinaStateUniversity{yajinzhou,zhiwang,wzhou2}@ncsu.edujiang@cs.ncsu.eduAbstracttherboostthepopularity.Thesecentr
2、alizedmarketplacesorappstoresstreamlinetheprocessofbrowsing,downloadingInthispaper,wepresentasystematicstudyforthede-andinstallingavarietyofapps-thereinfacilitatingtheusetectionofmaliciousapplications(orapps)onpopularAn-ofsmartphones.droidMarkets.Tothisend,wefirstpr
3、oposeapermission-Unfortunately,suchpopularityalsoattractstheat-basedbehavioralfootprintingschemetodetectnewsam-tentionofmalwareauthors.Afewreports[19,20,plesofknownAndroidmalwarefamilies.Thenweapplya25]alreadyshowedthepresenceofmaliciousappsinheuristics-basedfilteri
4、ngschemetoidentifycertaininher-thesemarketplaces.Forinstance,DroidDream[19]andentbehaviorsofunknownmaliciousfamilies.Weimple-DroidDreamLight[25]weredetectedfromtheofficialAn-mentedbothschemesinasystemcalledDroidRanger.ThedroidMarketinMarchandMay2011,respectively.Whi
5、leexperimentswith204,040appscollectedfromfivedifferentthesereportsofferdetailedanalysisaboutthespotted(indi-AndroidMarketsinMay-June2011reveal211maliciousvidual)malware,theydonotprovideasystematicviewofones:32fromtheofficialAndroidMarket(0.02%infec-theoverallhealthof
6、existingAndroidMarkets.Recently,tionrate)and179fromalternativemarketplaces(infectionEncketal.[36]studied1,100freeappsfromtheofficialratesrangingfrom0.20%to0.47%).Amongthosemali-AndroidMarketandattemptedtounderstandabroadrangeciousapps,oursystemalsouncoveredtwozero-d
7、aymal-ofsecurity-relatedmetricsamongthem(asanindicationofware(in40apps):onefromtheofficialAndroidMarkettheoverallappsecurity).However,thestudyislimitedinandtheotherfromalternativemarketplaces.Theresultsonlyexaminingasmallnumberofapps,i.e.,top50freeshowthatcurrentmar
8、ketplacesarefunctionalandrela-appsfromthe22appcategories.tivelyhealthy.However,thereisalsoaclearneedforaInthispaper,wepresentasystematicstudytobe