ISG Feb01 2016 — CopperDroid: Automatic Android Malware Analysis and Classification

Dr. Lorenzo Cavallaro, will introduces us CopperDroid. An automatic VMI-based dynamic analysis system that reconstruct the behaviors of Android malware, developed within the Systems Security Research Lab at Royal Holloway, University of London.
CopperDroid novelty lies in its agnostic approach to identify interesting OS- and high-level Android-specific behaviors. It reconstructs these behaviors by observing and dissecting system calls and, therefore, is resistant to the multitude of alterations the Android runtime is subjected to over its life-cycle. CopperDroid’s analysis generates detailed behavioral profiles that abstract a large stream of low-level—often uninteresting—events into concise, high-level semantics, which are well-suited to provide insightful behavioral traits and open the possibility to further research directions. To this end, Dr. Cavallaro will show current efforts to investigate the efficacy of behavioral profiles of different abstractions to differentiate between families of malware.

Источник