基于三级签名的安卓恶意软件分析方法

智能手机上的恶意软件数量呈现爆炸式增长,目前迫切需要一个安全分析与检测方法.一个有效的检测与分析方法需要解决的最大问题就是如何从应用程序和恶意软件的汪洋大海中识别重新包装的应用程序.论文提出了基于三级签名的恶意软件分析方法MSAnalytics,根据API调用序列,提取在操作码级的恶意软件特征,生成应用程序三级签名.实验证明,MSAnalytics对重新包装恶意软件具有良好的分析能力.

Analytic Method of Android Malware Based on Three Level Signature

The number of malwares on intelligent mobile phone has explosive growth,there is an urgent need to have a security analytic and detect system.An effective analytic system needs to address the biggest question：how to identify repackaged applications（or mutated malware） from the vast ocean of applications and malware.In this paper,the MSAnalytics,a three level signature based analytic method is presented to automatically analyze and extract android malware.The evaluation shows the MSAnalytics is effective in analyzing repackaging malware.