uitXkernel: Android Kernel Forensic for Security Analysis Purposes

HIEN DO

13:31 07/11/2022

The Android operating systems is becoming more popular. Security analysis on Android devices is necessary. We can perform security assessment on difference components of Android operating system such as pre-installed applications component, application framework component, or Linux kernel (Android kernel) component. Most of the current studies focus on pre-installed applications, rather than the rest. However, vulnerabilities may exist in any of these components. The Android kernel is one of the lowest layer components in Android phones. In this study, we proposed a method to analyze security issues in Android kernel. The proposed system can be used to list system calls that need to analyze to detect security issues in Android kernel. By using the proposed system, we analyze the changed system calls only instead of all system calls in the Android Kernel. This method can be used to reduce the time cost of the Android kernel analysis process. According to the experimental results, the proposed system analyzes correctly not only the customized Android kernel but also the Android kernels in the wild.

TIN LIÊN QUAN

An Approach of Adaptive Cyber Deception for Active Cyber-attack Defense Method based on Deep Reinforcement Learning

The diverse landscape of network models, including Software-Defined Networking (SDN), Cloud Computing (C2), and Internet of Things (IoT), is evolving to meet the demands of flexibility and performance. However, these environments face numerous security challenges due to cyber-attack complexity. Traditional defense mechanisms are no longer effective against modern attacks. Therefore,...

Multimodal Deep Learning Feedback for Generating Evasive Malware Samples against Malware Detector

As data driven-based Windows malware detectors become increasingly prevalent, the need for robust evaluation and enhancement of adversarial malware generation techniques also becomes imperative, as malicious actors will adapt and enhance their malware to evade detection. There are numerous works that introduce new techniques or enhancements for adversarial malware. One...

Medichain: A multi-chain based system for managing prescription medications using Zero Knowledge Proofs

The abuse of prescription medications has become a severe public health crisis fueled by limited coordination and oversight across healthcare systems. Current frameworks lack interoperability between doctors, pharmacies, and regulators, enabling abusive practices like doctor shopping and pharmacy hopping. To address these issues, this research proposes Medichain, a novel multichain-based...