Android Application Security

A Semantics and Context-Aware Approach
1. Auflage 2016
ISBN: 978-3-319-47811-1
Verlag: Springer

Buch, Englisch, 105 Seiten, Format (B × H): 155 mm x 235 mm, Gewicht: 1942 g

Reihe: SpringerBriefs in Computer Science

This SpringerBrief explains the emerging cyber threats that undermine Android application security. It further explores the opportunity to leverage the cutting-edge semantics and context–aware techniques to defend against such threats, including zero-day Android malware, deep software vulnerabilities, privacy breach and insufficient security warnings in app descriptions. The authors begin by introducing the background of the field, explaining the general operating system, programming features, and security mechanisms. The authors capture the semantic-level behavior of mobile applications and use it to reliably detect malware variants and zero-day malware. Next, they propose an automatic patch generation technique to detect and block dangerous information flow. A bytecode rewriting technique is used to confine privacy leakage. User-awareness, a key factor of security risks, is addressed by automatically translating security-related program semantics into natural languagedescriptions. Frequent behavior mining is used to discover and compress common semantics. As a result, the produced descriptions are security-sensitive, human-understandable and concise.By covering the background, current threats, and future work in this field, the brief is suitable for both professionals in industry and advanced-level students working in mobile security and applications. It is valuable for researchers, as well.

Zielgruppe

Research

Autoren/Hrsg.

Zhang, Mu

Yin, Heng

Fachgebiete

• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit
• Mathematik | Informatik EDV | Informatik Computerkommunikation & -vernetzung Netzwerksicherheit
• Mathematik | Informatik EDV | Informatik Computerkommunikation & -vernetzung Mobilfunk- und Drahtlosnetzwerke & Anwendungen
• Technische Wissenschaften Elektronik | Nachrichtentechnik Nachrichten- und Kommunikationstechnik Drahtlostechnologie

Inhaltsverzeichnis

Introduction.- Background.- Semantics-Aware Android Malware Classification.- Automatic Generation of Vulnerability-Specific Patches for Preventing Component Hijacking Attacks.- Efficient and Context-Aware Privacy Leakage Confinement.- Automatic Generation of Security-Centric Descriptions for Android Apps.- Limitation and Future Work.- Conclusion.