Presentation 2014-07-04
Evaluating Resistance of Android Applications to Automated Repackaging
Fumihiro Kanei, Yuki Shoda, Katsunari Yoshioka, Tsutomu Matsumoto,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) Android is widely used as a smartphone OS. On the other hand, malware targeting the Android devices is increasing. Sometimes, attackers insert malicious code to benign application to create malware. It is called repackage malware. Attackers may automate the process of repackaging when they create a large amount of repackage malware. However, difficulty and cost of automated repackage have not been well-investigated. In this paper, we evaluate resistance of Android apps to automated repackaging. For reproduction of automated repackage, we insert a test code to benign apps by methods which have been used in actual repackage malware. After repackaging, we check whether the inserted code properly works or not by dynamic analysis. As a result of the experiment, we successfully insert the test code into 75% of all tested popular apps without influencing the functionalities of the original apps. As there is no technical difficulty to replace the test code to malicious code, we conclude that many Android apps are lack of resistance to automated repackage and must consider measures such as Tamper resistant software technology.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) Android / Repackage
Paper # ISEC2014-43,SITE2014-38,ICSS2014-47,EMM2014-43
Date of Issue

Conference Information
Committee ICSS
Conference Date 2014/6/26(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Information and Communication System Security (ICSS)
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) Evaluating Resistance of Android Applications to Automated Repackaging
Sub Title (in English)
Keyword(1) Android
Keyword(2) Repackage
1st Author's Name Fumihiro Kanei
1st Author's Affiliation Yokohama National University()
2nd Author's Name Yuki Shoda
2nd Author's Affiliation Yokohama National University
3rd Author's Name Katsunari Yoshioka
3rd Author's Affiliation Yokohama National University
4th Author's Name Tsutomu Matsumoto
4th Author's Affiliation Yokohama National University
Date 2014-07-04
Paper # ISEC2014-43,SITE2014-38,ICSS2014-47,EMM2014-43
Volume (vol) vol.114
Number (no) 117
Page pp.pp.-
#Pages 7
Date of Issue