Abstract:Recent years have experienced explosive growth of smartphone sales. Inevitably, the rise in the popularity of smartphones also makes them an attractive target for attacks. In light of these threats, current mobile platform providers have developed various server-side vetting processes to block malicious applications (“apps”). While helpful, they are still far from ideal in achieving their goals. To make matters worse, the presence of alternative (less-regulated) mobile marketplaces also opens up new attack vectors, which necessitate client-side solutions (e.g., mobile anti-virus software) to run on mobile devices. However, existing client-side solutions still exhibit limitations in their capability or deployability. In this paper, we present AirBag, a lightweight OS-level virtualization approach to enhance the popular Android platform and boost our defense capability against mobile malware infection. Assuming a trusted smartphone OS kernel and the fact that untrusted apps will be eventually installed onto users’ phones, AirBag is designed to isolate and prevent them from infecting our normal systems (e.g., corrupting the phone firmware) or stealthily leaking private information. More specifically, by dynamically creating an isolated runtime environment with its own dedicated namespace and virtualized system resources, AirBag not only allows for transparent execution of untrusted apps, but also effectively mediates their access to various system resources or phone functionalities (e.g., SMSs or phone calls). We have implemented a proof-of-concept prototype on three representative mobile devices, i.e., Google Nexus One, Nexus 7, and Samsung Galaxy S III. The evaluation results with a number of untrusted apps, including real-world mobile malware, demonstrate its practicality and effectiveness.

Evaluation of Security Solutions for Android Systems

Google Android: A State-of-the-Art Review of Security Mechanisms

AirBag: Boosting Smartphone Resistance to Malware Infection.

Dissecting Android Malware: Characterization and Evolution

Android Evaluation Methodology in Automotive Electronics

Security Evaluation of Companion Android Applications in IoT: The Case of Smart Security Devices

Security Smells in Android

Dynamic Security Analysis on Android: A Systematic Literature Review

Penetration Frameworks and Development Issues in Secure Mobile Application Development: A Systematic Literature Review

A Survey on Smartphones Security: Software Vulnerabilities, Malware, and Attacks

Open Source Android Vulnerability Detection Tools: A Survey

Evaluating the Information Security Awareness of Smartphone Users

Review of Application and Analysis Techniques for Mobile System Security

Cyber Security In Mobile Apps And User CIA

Demystifying security and compatibility issues in Android Apps

Data security and quality evaluation framework: Implementation empirical study on android devices

A Comprehensive Review of Android Security: Threats, Vulnerabilities, Malware Detection, and Analysis

The Android Platform Security Model (2023)

AndroShield: Automated Android Applications Vulnerability Detection, a Hybrid Static and Dynamic Analysis Approach

Brief View and Analysis to Latest Android Security Issues and Approaches

Android malware detection: a survey