Please use this identifier to cite or link to this item:
https://www.um.edu.mt/library/oar/handle/123456789/99421
Full metadata record
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Leguesse, Yonas | - |
dc.contributor.author | Vella, Mark Joseph | - |
dc.contributor.author | Ellul, Joshua | - |
dc.date.accessioned | 2022-07-15T11:00:29Z | - |
dc.date.available | 2022-07-15T11:00:29Z | - |
dc.date.issued | 2017 | - |
dc.identifier.citation | Leguesse, Y., Vella, M., & Ellul, J. (2017, September). AndroNeo : Hardening Android malware sandboxes by predicting evasion heuristics. In IFIP International Conference on Information Security Theory and Practice (pp. 140-152). Springer, Cham. | en_GB |
dc.identifier.uri | https://www.um.edu.mt/library/oar/handle/123456789/99421 | - |
dc.description.abstract | Sophisticated Android malware families often implement techniques aimed at avoiding detection. Split personality malware for example, behaves benignly when it detects that it is running on an analysis environment such as a malware sandbox, and maliciously when running on a real user’s device. These kind of techniques are problematic for malware analysts, often rendering them unable to detect or understand the malicious behaviour. This is where sandbox hardening comes into play. In our work, we exploit sandbox detecting heuristic prediction to predict and automatically generate bytecode patches, in order to disable the malware’s ability to detect a malware sandbox. Through the development of AndroNeo, we demonstrate the feasibility of our approach by showing that the heuristic prediction basis is a solid starting point to build upon, and demonstrating that when heuristic prediction is followed by bytecode patch generation, split personality can be defeated. | en_GB |
dc.language.iso | en | en_GB |
dc.publisher | Springer | en_GB |
dc.rights | info:eu-repo/semantics/openAccess | en_GB |
dc.subject | Operating systems (Computers) | en_GB |
dc.subject | Android (Electronic resource) | en_GB |
dc.subject | Malware (Computer software) | en_GB |
dc.subject | Mobile computing | en_GB |
dc.subject | Smartphones -- Security measures | en_GB |
dc.title | AndroNeo : hardening Android malware sandboxes by predicting evasion heuristics | en_GB |
dc.type | conferenceObject | en_GB |
dc.rights.holder | The copyright of this work belongs to the author(s)/publisher. The rights of this work are as defined by the appropriate Copyright Legislation or as modified by any successive legislation. Users may access this work and can make use of the information contained in accordance with the Copyright Legislation provided that the author must be properly acknowledged. Further distribution or reproduction in any format is prohibited without the prior permission of the copyright holder. | en_GB |
dc.bibliographicCitation.conferencename | WISTP 2017 | en_GB |
dc.bibliographicCitation.conferenceplace | Heraklion, Greece, 28-29/09/2017 | en_GB |
dc.description.reviewed | peer-reviewed | en_GB |
Appears in Collections: | Scholarly Works - FacICTCS |
Files in This Item:
File | Description | Size | Format | |
---|---|---|---|---|
AndroNeo__Hardening_Android_malware_sandboxes_by_predicting_evasion_heuristics(2017).pdf | 624.75 kB | Adobe PDF | View/Open |
Items in OAR@UM are protected by copyright, with all rights reserved, unless otherwise indicated.