Paper Info
Title
An Antivirus Api For Android Malware Recognition
Abstract
On the Android platform, antivirus software suffers from significant deficiencies. Due to platform limitations, it cannot access or monitor an Android device's file system, or dynamic behavior of installed apps. This includes the down-loading of malicious files after installation, and other file system alterations. That has grave consequences for device security, as any app - even without openly malicious code in its package file - can still download and execute malicious files without any danger of being detected by antivirus software. In this paper, we present a proposal for an antivirus interface to be added to the Android API. It allows for three primary operations: (1) on-demand file system scanning and traversal, (2) on-change file system monitoring, (3) a set of basic operations that allow for scanning of arbitrary file system objects without disclosing their contents. This interface can enable Android antivirus software to deploy techniques for malware recognition similar to those of desktop antivirus systems. The proposed measures comply with Android's security architecture and user data privacy is maintained. Through our approach, antivirus software on the Android platform would reach a level of effectiveness significantly higher than currently, and comparable to that of desktop antivirus software.
Year
DOI
Venue
2013
10.1109/MALWARE.2013.6703688
PROCEEDINGS OF THE 2013 8TH INTERNATIONAL CONFERENCE ON MALICIOUS AND UNWANTED SOFTWARE: THE AMERICAS (MALWARE)
Keywords
Field
DocType
data privacy
Internet privacy,File system,Tree traversal,Android (operating system),Computer science,Computer security,Upload,Software,Malware,Enterprise information security architecture,Information privacy,Operating system
Conference
Citations 
PageRank 
References 
2
0.45
5
Authors
3
Name
Order
Citations
PageRank
Rafael Fedler190.95
Marcel Kulicke290.95
Julian Schütte35814.61