CopperDroid: Automatic Reconstruction of Android Malware Behaviors
- Submitting institution
-
University of Plymouth
- Unit of assessment
- 11 - Computer Science and Informatics
- Output identifier
- 879
- Type
- E - Conference contribution
- DOI
-
10.14722/ndss.2015.23145
- Title of conference / published proceedings
- Proceedings 2015 Network and Distributed System Security Symposium
- First page
- 1
- Volume
- -
- Issue
- -
- ISSN
- -
- Open access status
- -
- Month of publication
- -
- Year of publication
- 2015
- URL
-
-
- Supplementary information
-
-
- Request cross-referral to
- -
- Output has been delayed by COVID-19
- No
- COVID-19 affected output statement
- -
- Forensic science
- No
- Criminology
- No
- Interdisciplinary
- No
- Number of additional authors
-
3
- Research group(s)
-
-
- Citation count
- -
- Proposed double-weighted
- No
- Reserve for an output with double weighting
- No
- Additional information
- CopperDroid is an automatic VMI-based dynamic analysis tool that can abstract both low-level system-specific and high-level app-level behaviours on Android smartphones to reconstruct and analyse malware. This paper describes a novel method by which high-level behaviours could be reconstructed using details from the Android kernel and system level information. The work is important as it demonstrates that CopperDroid can faithfully reconstruct malware behaviours in a number of Android OS versions and greatly improve malware classification and detection.
- Author contribution statement
- -
- Non-English
- No
- English abstract
- -