7 papers
Demystifying Hidden Sensitive Operations in Android apps
Xiaoyu Sun, Xiao Chen, Li Li +5
Security of Android devices is now paramount, given their wide adoption among consumers. As researchers develop tools for statically or dynamically detecting suspicious apps, malwa…
TriggerZoo: A Dataset of Android Applications Automatically Infected with Logic Bombs
Jordan Samhi, Tegawendé F. Bissyandé, Jacques Klein
Many Android apps analyzers rely, among other techniques, on dynamic analysis to monitor their runtime behavior and detect potential security threats. However, malicious developers…
Difuzer: Uncovering Suspicious Hidden Sensitive Operations in Android Apps
Jordan Samhi, Li Li, Tegawendé F. Bissyandé +1
One prominent tactic used to keep malicious behavior from being detected during dynamic test campaigns is logic bombs, where malicious operations are triggered only when specific c…
JuCify: A Step Towards Android Code Unification for Enhanced Static Analysis
Jordan Samhi, Jun Gao, Nadia Daoudi +6
Native code is now commonplace within Android app packages where it co-exists and interacts with Dex bytecode through the Java Native Interface to deliver rich app functionalities.…
On The (In)Effectiveness of Static Logic Bomb Detector for Android Apps
Jordan Samhi, Alexandre Bartel
Android is present in more than 85% of mobile devices, making it a prime target for malware. Malicious code is becoming increasingly sophisticated and relies on logic bombs to hide…
RAICC: Revealing Atypical Inter-Component Communication in Android Apps
Jordan Samhi, Alexandre Bartel, Tegawendé F. Bissyandé +1
Inter-Component Communication (ICC) is a key mechanism in Android. It enables developers to compose rich functionalities and explore reuse within and across apps. Unfortunately, as…