Efficient resolution of security-sensitive values in Android using abstract interpretation

In this thesis I present a design for an efficient and sound abstract interpretation-based Value Analysis which calculates field values of security-relevant Android API class instances. The analysis is an important component of DroidSafe, an Android malware detection system designed to prove important properties of sensitive program behaviors before the programs appear in an application marketplace. The resolved program values provide important context for other DroidSafe analyses and the generated application summary, improving their precision. This in turn helps a trusted analyst avoid false positives and determine whether a particular application is malicious in a shorter amount of time.

Department dc:contributor.department

Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science.

Grantor dc:publisher

Massachusetts Institute of Technology

Year dc:date.issued

2014

Author dc:creator

• Petters, Dmitrij

Advisor dc:contributor.advisor

• Martin C. Rinard.

• Electrical Engineering and Computer Science.

Statement dc:rights

• M.I.T. theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission. See provided URL for inquiries about permission.

Licence dc:rights.uri

• http://dspace.mit.edu/handle/1721.1/7582

Language dc:language.iso

eng

Handle dc:identifier.uri

http://hdl.handle.net/1721.1/91859

OAI identifier oai:identifier

oai:dspace.mit.edu:1721.1/91859