Abstract:By 2014, the number of Android users has grown to 1.1 billion and the number of Android devices has reached 1.9 billion [1]. At the same time, enterprises are also embracing Android based Bring Your Own Device (BYOD) solutions. For example, in Intel’s BYOD program, there are over 20,000 Android devices across over 800 combinations of Android versions and hardware configurations [2].Although Google Play has little malware, there are many vulnerabilities in Android apps and the Android system itself. Aggressive ad libraries also leak the user’s private information. By combining altogether, an attacker can conduct more targeted attacks, which we call “Sidewinder Targeted Attacks”. In this paper, we explain the security risks from such attacks, in which an attacker can intercept private information like GPS location uploaded from ad libraries and use that information to precisely locate targeted areas such as a CEO’s office or some specific conference rooms. When the target is identified,“Sidewinder Targeted Attack” exploits popular vulnerabilities in ad libraries, such as Javascript-bindingover-HTTP or dynamic-loading-over-HTTP, etc. It is a well-known challenge for an attacker to call Android services from injected native code which doesn’t have Android application context. We explain how attackers can invoke Android services for tasks such as taking photos, calling phone numbers, sending SMS, reading/writing the clipboard, etc. Furthermore, the attackers can exploit several Android vulnerabilities to get valuable private information or to launch more advanced attacks. Finally, we show that this threat is not only real but also prevalent due to …

Android Malicious AD Threat Analysis and Detection Techniques

Malton: Towards On-Device Non-Invasive Mobile Malware Analysis for ART.

Hey, You, Get off of My Market: Detecting Malicious Apps in Official and Alternative Android Markets.

Poster: Adhoneydroid - Capture Malicious Android Advertisements

Detecting Passive Content Leaks and Pollution in Android Applications.

Dissecting Android Malware: Characterization and Evolution

Understanding In-App Ads and Detecting Hidden Attacks Through the Mobile App-Web Interface

Sidewinder: Targeted attack against Android in the golden age of ad libraries

Study on the Application of Dalvik Injection Technique for the Detection of Malicious Programs in Android

MadDroid: Characterizing and Detecting Devious Ad Contents for Android Apps

Android HIV: A Study of Repackaging Malware for Evading Machine-Learning Detection

Security Analysis for Android Applications Using Sensitive Path Identification

DroidAlarm: an all-sided static analysis tool for Android privilege-escalation malware.

A3: Automatic Analysis of Android Malware

Study of the Influence of Anti-analysis Techniques on the Security of Android Ecosystem

Android malware detection: a survey

An APP Sensitive Behaviors Detection Method Based on Android Kernel and Its Implementation

Efficient malware detection through inter-component communication analysis

Understanding Malicious Cross-library Data Harvesting on Android.

Malware Detection Technology Analysis and Applied Research of Android Platform

Towards Privacy-Preserving Malware Detection Systems for Android