Detecting control flow in Smarphones: Combining static and dynamic analyses - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2012

Detecting control flow in Smarphones: Combining static and dynamic analyses

Résumé

Security in embedded systems such as smartphones requires protection of confidential data and applications. Many of security mechanisms use dynamic taint analysis techniques for tracking information flow in software. But these techniques cannot detect control flows that use conditionals to implicitly transfer information from objects to other objects. In particular, malicious applications can bypass Android system and get privacy sensitive information through control flows. We propose an enhancement of dynamic taint analysis that propagates taint along control dependencies by using the static analysis in embedded system such as Google Android operating system. By using this new approach, it becomes possible to protect sensitive information and detect most types of software exploits without reporting too many false positives.
Fichier principal
Vignette du fichier
Article.pdf (240.01 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-00785180 , version 1 (05-02-2013)

Identifiants

Citer

Mariem Graa, Nora Cuppens-Bouhlahia, Frédéric Cuppens, Ana Cavalli. Detecting control flow in Smarphones: Combining static and dynamic analyses. CSS 2012: The 4th International Symposium on Cyberspace Safety and Security, Dec 2012, Melbourne, Australia. pp.33 - 47, ⟨10.1007/978-3-642-35362-8_4⟩. ⟨hal-00785180⟩
197 Consultations
799 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More