Malware in Motion

Robert Choudhury, Zhiyuan Luo, Khuong Nguyen

2022

Abstract

Malicious software (malware) is designed to circumvent the security policy of the host device. Smartphones represent an attractive target to malware authors as they are often a rich source of sensitive information. Attractive targets for attackers are sensors (such as cameras or microphones) which allow observation of the victims in real time. To counteract this threat, there has been a tightening of privileges on mobile devices with respect to sensors, with app developers being required to declare which sensors they need access to, as well as the users needing to give consent. We demonstrate by conducting a survey of publicly accessible malware analysis platforms that there are still implementations of sensors which are trivial to detect without exposing the malicious intent of a program. We also show how that, despite changes to the permission model, it is still possible to fingerprint an analysis environment even when the analysis is carried out using a physical device with the novel use of Android’s Activity Recognition API.

Paper Citation

in Harvard Style

Choudhury R., Luo Z. and Nguyen K. (2022). Malware in Motion. In Proceedings of the 8th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP, ISBN 978-989-758-553-1, pages 595-602. DOI: 10.5220/0010976200003120

in Bibtex Style

@conference{icissp22,
author={Robert Choudhury and Zhiyuan Luo and Khuong Nguyen},
title={Malware in Motion},
booktitle={Proceedings of the 8th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,},
year={2022},
pages={595-602},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0010976200003120},
isbn={978-989-758-553-1},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 8th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,
TI - Malware in Motion
SN - 978-989-758-553-1
AU - Choudhury R.
AU - Luo Z.
AU - Nguyen K.
PY - 2022
SP - 595
EP - 602
DO - 10.5220/0010976200003120