Capturing Android Malware Behaviour using System Flow Graph

Radoniaina Andriatsimandefitra (1) , Valérie Viet Triem Tong (1)

1 CIDRE - Confidentialité, Intégrité, Disponibilité et Répartition

This article uses a new data structure namely System Flow Graph (SFG) that offers a compact representation of information dis- semination induced by an execution of an application to characterize malicious application behavior and lead some experiments on 4 malware families DroidKungFu1, DroidKungFu2, jSMSHider, BadNews. We show how SFG are relevant to exhibit malware behavior.

Mots clés: android malware; information flow; malware classification

Domaines: Cryptographie et sécurité [cs.CR]

Radoniaina Andriatsimandefitra, Valérie Viet Triem Tong. Capturing Android Malware Behaviour using System Flow Graph. NSS 2014 - The 8th International Conference on Network and System Security, Oct 2014, Xi'an, China. ⟨10.1007/978-3-319-11698-3_43⟩. ⟨hal-01018611⟩