ComputingComputer ScienceCybersecurityMalware AnalysisMobile ComputingMobile SecurityMalware Evasion TechniquesMalware Reverse EngineeringMobile Application DevelopmentMobile Application Reverse EngineeringMobile Application VulnerabilitiesMobile Device SecurityAnti-malwareMalware DetectionMobile MalwareMobile Malware DetectionMobile Malware Reverse EngineeringMobile Threat DefenseObfuscationObfuscation Techniques
Mobile malware threats are a growing concern, and evaluating defenses is essential to gauge current protection and guide next‑generation solutions. The study evaluates commercial Android anti‑malware products for resistance to common obfuscation techniques. The authors developed DroidChameleon, a systematic framework applying various transformation techniques, to conduct the evaluation. None of the ten evaluated Android anti‑malware tools resisted common transformation techniques, which are often simple and poorly addressed, prompting the authors to suggest remedies to improve mobile malware detection.
Mobile malware threats have recently become a real concern. In this paper, we evaluate the state-of-the-art commercial mobile antimalware products for Android and test how resistant they are against various common obfuscation techniques (even with known malware). Such an evaluation is important for not only measuring the available defense against mobile malware threats but also proposing effective, next-generation solutions. We developed DroidChameleon, a systematic framework with various transformation techniques, and used it for our study. Our results on ten popular commercial anti-malware applications for Android are worrisome: none of these tools is resistant against common malware transformation techniques. Moreover, the transformations are simple in most cases and anti-malware tools make little effort to provide transformation-resilient detection. Finally, in the light of our results, we propose possible remedies for improving the current state of malware detection on mobile devices.
17
Dissecting Android Malware: Characterization and Evolution
Yajin Zhou, Xuxian Jiang · 2012 · 2.1K citations
Iker Burguera, Urko Zurutuza, Simin Nadjm‐Tehrani · 2011 · 906 citations
A Taxonomy of Obfuscating Transformations
Christian Collberg, Clark Thomborson, Douglas Low · 1997 · 853 citations
Semantics-aware malware detection
Mihai Christodorescu, Somesh Jha, Sanjit A. Seshia et al. · 2005 · 723 citations · Full text