Dynamic Loading Vulnerability Detection for Android Applications Through Ensemble Learning. Issue 5 (1st September 2017)

• Record Type: Journal Article
• Authors: Yang, Tianchang; Cui, Haoliang; Niu, Shaozhang
• Is Part Of: Chinese journal of electronics. Volume 26:Issue 5(2017)
• Page Start: 960
• Page End: 965
• Publication Date: 2017-09-01
• Subjects: Dynamic loading -- Android application -- Vulnerability -- Ensemble learning; Android (operating system) -- feature extraction -- learning (artificial intelligence) -- message authentication -- pattern classification -- program diagnostics -- vectors; dynamic loading vulnerability detection -- Android -- valid authentication -- security protection -- static analysis -- feature vector extraction -- identification phase -- multilabel classification ensemble learning; Electronics -- Periodicals; Electronics -- China -- Periodicals; Electronics; China; Periodicals; 621.38105
• DOI: 10.1049/cje.2017.07.001
• Languages: English
• ISSNs: 1022-4653

Abstract

Abstract : Valid authentication and security protection measures are not provided for external code and resources executed by dynamic loading technology during the runtime in Android. In this paper, a new method of detecting vulnerabilities related to dynamic loading technology is proposed. Two phases are included in the detection process. Static analysis phase determines the location information of the loading point and extracts the feature vector for each loading procedure. Identification phase classifies the extracted feature vector by means of constructed multilabel classification ensemble learning algorithm. According to the examination result on 4464 Android applications, 37.8% of all applications use the dynamic loading technology, and more than 12% of total test applications are detected with related security deficiencies. Experimental result shows that the detection method can detect vulnerabilities of dynamic loading effectively and is more comprehensive.