A study on static analysis model of mobile application for privacy protection

Seil Kim; Jae Ik Cho; Hee Won Myeong; Dong Hoon Lee

doi:10.1007/978-94-007-2792-2_50

A study on static analysis model of mobile application for privacy protection

Seil Kim, Jae Ik Cho, Hee Won Myeong, Dong Hoon Lee

School of Cybersecurity

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

17 Citations (Scopus)

Abstract

Since mobile application market drastically extended, there have been many problems related to proliferative malicious applications that leak user's private information stored in own smart device. In Korea, government strives to protect smart device users from these problems and to establish legal basis through 'Privacy Act' as a preceding step but studies on analysis models and verification tools for mobile application have not yet much developed. The purpose of this research is to suggest an analysis system to prevent propagation of harmful applications, which compromise the user's personal information, by extracting signatures from malicious code samples detected in Android. Maliciousness of the applications has determined by learning their parsing information on the components such as DEX, Manifest, SO etc.

Original language	English
Title of host publication	Computer Science and Convergence, CSA 2011 and WCC 2011 Proceedings
Pages	529-540
Number of pages	12
DOIs	https://doi.org/10.1007/978-94-007-2792-2_50
Publication status	Published - 2012
Event	3rd International Conference on Computer Science and Its Applications, CSA 2011 and 2011 FTRA World Convergence Conference, WCC 2011 - Jeju, Korea, Republic of Duration: 2011 Dec 12 → 2011 Dec 15

Publication series

Name	Lecture Notes in Electrical Engineering
Volume	114 LNEE
ISSN (Print)	1876-1100
ISSN (Electronic)	1876-1119

Other

Other	3rd International Conference on Computer Science and Its Applications, CSA 2011 and 2011 FTRA World Convergence Conference, WCC 2011
Country/Territory	Korea, Republic of
City	Jeju
Period	11/12/12 → 11/12/15

Bibliographical note

Funding Information:
This work was supported by the IT R&D program of MKE/KEIT [KI0038421, Develop method and apparatus for diagnosing malicious mobile program and protecting solution].

Keywords

Android
Privacy
Signature
Static analysis

ASJC Scopus subject areas

Industrial and Manufacturing Engineering

Access to Document

10.1007/978-94-007-2792-2_50

Cite this

Kim, S, Cho, JI, Myeong, HW & Lee, DH 2012, A study on static analysis model of mobile application for privacy protection. in Computer Science and Convergence, CSA 2011 and WCC 2011 Proceedings. Lecture Notes in Electrical Engineering, vol. 114 LNEE, pp. 529-540, 3rd International Conference on Computer Science and Its Applications, CSA 2011 and 2011 FTRA World Convergence Conference, WCC 2011, Jeju, Korea, Republic of, 11/12/12. https://doi.org/10.1007/978-94-007-2792-2_50

@inproceedings{3a9154229f1746069bb9f84da9582275,

title = "A study on static analysis model of mobile application for privacy protection",

abstract = "Since mobile application market drastically extended, there have been many problems related to proliferative malicious applications that leak user's private information stored in own smart device. In Korea, government strives to protect smart device users from these problems and to establish legal basis through 'Privacy Act' as a preceding step but studies on analysis models and verification tools for mobile application have not yet much developed. The purpose of this research is to suggest an analysis system to prevent propagation of harmful applications, which compromise the user's personal information, by extracting signatures from malicious code samples detected in Android. Maliciousness of the applications has determined by learning their parsing information on the components such as DEX, Manifest, SO etc.",

keywords = "Android, Privacy, Signature, Static analysis",

author = "Seil Kim and Cho, {Jae Ik} and Myeong, {Hee Won} and Lee, {Dong Hoon}",

note = "Funding Information: This work was supported by the IT R&D program of MKE/KEIT [KI0038421, Develop method and apparatus for diagnosing malicious mobile program and protecting solution].; 3rd International Conference on Computer Science and Its Applications, CSA 2011 and 2011 FTRA World Convergence Conference, WCC 2011 ; Conference date: 12-12-2011 Through 15-12-2011",

year = "2012",

doi = "10.1007/978-94-007-2792-2_50",

language = "English",

isbn = "9789400727915",

series = "Lecture Notes in Electrical Engineering",

pages = "529--540",

booktitle = "Computer Science and Convergence, CSA 2011 and WCC 2011 Proceedings",

}

TY - GEN

T1 - A study on static analysis model of mobile application for privacy protection

AU - Kim, Seil

AU - Cho, Jae Ik

AU - Myeong, Hee Won

AU - Lee, Dong Hoon

N1 - Funding Information: This work was supported by the IT R&D program of MKE/KEIT [KI0038421, Develop method and apparatus for diagnosing malicious mobile program and protecting solution].

PY - 2012

Y1 - 2012

N2 - Since mobile application market drastically extended, there have been many problems related to proliferative malicious applications that leak user's private information stored in own smart device. In Korea, government strives to protect smart device users from these problems and to establish legal basis through 'Privacy Act' as a preceding step but studies on analysis models and verification tools for mobile application have not yet much developed. The purpose of this research is to suggest an analysis system to prevent propagation of harmful applications, which compromise the user's personal information, by extracting signatures from malicious code samples detected in Android. Maliciousness of the applications has determined by learning their parsing information on the components such as DEX, Manifest, SO etc.

AB - Since mobile application market drastically extended, there have been many problems related to proliferative malicious applications that leak user's private information stored in own smart device. In Korea, government strives to protect smart device users from these problems and to establish legal basis through 'Privacy Act' as a preceding step but studies on analysis models and verification tools for mobile application have not yet much developed. The purpose of this research is to suggest an analysis system to prevent propagation of harmful applications, which compromise the user's personal information, by extracting signatures from malicious code samples detected in Android. Maliciousness of the applications has determined by learning their parsing information on the components such as DEX, Manifest, SO etc.

KW - Android

KW - Privacy

KW - Signature

KW - Static analysis

UR - http://www.scopus.com/inward/record.url?scp=84255178215&partnerID=8YFLogxK

U2 - 10.1007/978-94-007-2792-2_50

DO - 10.1007/978-94-007-2792-2_50

M3 - Conference contribution

AN - SCOPUS:84255178215

SN - 9789400727915

T3 - Lecture Notes in Electrical Engineering

SP - 529

EP - 540

BT - Computer Science and Convergence, CSA 2011 and WCC 2011 Proceedings

T2 - 3rd International Conference on Computer Science and Its Applications, CSA 2011 and 2011 FTRA World Convergence Conference, WCC 2011

Y2 - 12 December 2011 through 15 December 2011

ER -

A study on static analysis model of mobile application for privacy protection

Abstract

Publication series

Other

Bibliographical note

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this