Droidboxis a dynamic analysis tool that allows the execution of Android apps andprovides a variety of data about how an app is behaving. More precisely,Droidboxmonitors the execution of 11 different activities:•crypto: generated when calls to the cryptographic API are invoked.•netopen, netread, netwrite: associated with network I/O activities (opening aconnection, receiving, and sending data).•fileopen, fileread, filewrite: associated with file system I/O activities (opening,reading, and writing a file).•sms: generated whenever a text message is sent or received.•call: generated whenever a call is made or received from the device.•leak: generated when a leakage of private information has occurred. This isdetermined using tainting analysis [Enck et al., 2010].•dexload: generated when native code is loaded dynamically.We have extendedDroidboxto allow the extraction of these activities programatically.
đang được dịch, vui lòng đợi..