Abstract:Recent years have experienced explosive growth of smartphone sales. Inevitably, the rise in the popularity of smartphones also makes them an attractive target for attacks. In light of these threats, current mobile platform providers have developed various server-side vetting processes to block malicious applications (“apps”). While helpful, they are still far from ideal in achieving their goals. To make matters worse, the presence of alternative (less-regulated) mobile marketplaces also opens up new attack vectors, which necessitate client-side solutions (e.g., mobile anti-virus software) to run on mobile devices. However, existing client-side solutions still exhibit limitations in their capability or deployability. In this paper, we present AirBag, a lightweight OS-level virtualization approach to enhance the popular Android platform and boost our defense capability against mobile malware infection. Assuming a trusted smartphone OS kernel and the fact that untrusted apps will be eventually installed onto users’ phones, AirBag is designed to isolate and prevent them from infecting our normal systems (e.g., corrupting the phone firmware) or stealthily leaking private information. More specifically, by dynamically creating an isolated runtime environment with its own dedicated namespace and virtualized system resources, AirBag not only allows for transparent execution of untrusted apps, but also effectively mediates their access to various system resources or phone functionalities (e.g., SMSs or phone calls). We have implemented a proof-of-concept prototype on three representative mobile devices, i.e., Google Nexus One, Nexus 7, and Samsung Galaxy S III. The evaluation results with a number of untrusted apps, including real-world mobile malware, demonstrate its practicality and effectiveness.

Improving Mobile Application Security Via Bridging User Expectations and Application Behaviors

AirBag: Boosting Smartphone Resistance to Malware Infection.

Dissecting Android Malware: Characterization and Evolution

Taming Information-Stealing Smartphone Applications (On Android)

Security Analytics for Mobile Apps:Achievements and Challenges

Real-Time Behavior Analysis and Identification for Android Application

A Developer-Centric Study Exploring Mobile Application Security Practices and Challenges

An Informative and Comprehensive Behavioral Characteristics Analysis Methodology of Android Application for Data Security in Brain-Machine Interfacing

Towards Automated Risk Assessment and Mitigation of Mobile Applications

Demystifying security and compatibility issues in Android Apps

Security Smells in Android

Review of Application and Analysis Techniques for Mobile System Security

Making Distributed Mobile Applications SAFE: Enforcing User Privacy Policies on Untrusted Applications with Secure Application Flow Enforcement

SeMA: Extending and Analyzing Storyboards to Develop Secure Android Apps

Behavior-Based Malware Detection on Mobile Phone

Mobile App Security Trends and Topics: An Examination of Questions From Stack Overflow

SeMA: A Design Methodology for Building Secure Android Apps

Brief View and Analysis to Latest Android Security Issues and Approaches

Secure Session on Mobile: an Exploration on Combining Biometric, Trustzone, and User Behavior

Perception of information security and its implications for mobile phone

AnaDroid: Malware Analysis of Android with User-supplied Predicates