Volume 9 - Issue 3
Survey of Dynamic Anti-Analysis Schemes for Mobile Malware
- Jongsu Lim
School of Software, Soongsil University, 06978, Republic of Korea
jongsu253@gmail.com
- Yonggu Shin
School of Software, Soongsil University, 06978, Republic of Korea
tls09611@gmail.com
- Sunjun Lee
School of Software, Soongsil University, 06978, Republic of Korea
starj1024@gmail.com
- Kyuho Kim
School of Software, Soongsil University, 06978, Republic of Korea
krbgh205760@gmail.com
- Jeong Hyun Yi
School of Software, Soongsil University, 06978, Republic of Korea
jhyi@ssu.ac.kr
Keywords: Anti-rooting, anti-emulating, anti-debugging, mobile code reversing
Abstract
With the development of the smartphone market, the smartphone application market will grow significantly.
As a result, malicious code targeting smartphones is increasing exponentially. Attackers
are spreading malicious apps by embedding malicious code in the app through repackaging attacks.
Small-scale payment fraud and malicious files for smart banking also skyrocketed through smishing
attack targeting Android smartphone users. The intelligent attack, which refers to the type of target
attack, has also become fully visible. In the future, mobile payment and electronic financial crime
targeting smartphone users are expected to become more popular through malicious files based on
Android spreading through smishing attack and it is predicted that various irregular mobile security
threats will come true. To prepare for such attacks, several analytical tools have been developed, including
a sandbox tool that can analyze Android malicious apps. However, as in PC environment, we
anticipate the emergence of anti-analysis schemes that can neutralize these analytical tools. Therefore,
this paper analyzes the anti-analysis schemes applied to malicious applications. By supporting
the analysis of malicious applications based on the results of this work, it will be very helpful to
reduce the research cost of malicious code research and to create a secure smartphone security environment.