Publications-Periodical Articles

Article View/Open

Publication Export

Google ScholarTM

NCCU Library

Citation Infomation

Related Publications in TAIR

題名 AppBeach: A Static Behavior Checker for iOS Mobile Applications
作者 郁方*
Yu, Fang
Tai, Steven
Shao, Tang-Wei
Wang, Wei-Ren
貢獻者 資管系
日期 2015-04
上傳時間 6-Mar-2020 10:50:54 (UTC+8)
摘要 AppBeach standing on App Behavior Checker is a new service to reconstruct and report behaviors of iOS mobile applications, using static binary analysis to reveal embedded functions within the executables. AppBeach adopts a distributed algorithm on call sequence counting via the hadoop framework, achieving a scalable static syntax analysis on executables of modern apps. The main idea is syntactically counting call sequences that are embedded in iOS executable. This is done by distributing routines to mappers with the assembly tool that resolves explicit and implicit system method calls that are embedded in the iOS executables. The reducer then collects the counting from mappers to characterize the behaviors of apps. We learn patterns of malicious behaviors from the difference of pairs of normal and malicious apps, and report the probability of potential behaviors of commercial apps by matching these patterns to their call sequence counts.
關聯 Communications of the CCISA, Vol.21, No.2, pp.41-51
資料類型 article
dc.contributor 資管系
dc.creator (作者) 郁方*
dc.creator (作者) Yu, Fang
dc.creator (作者) Tai, Steven
dc.creator (作者) Shao, Tang-Wei
dc.creator (作者) Wang, Wei-Ren
dc.date (日期) 2015-04
dc.date.accessioned 6-Mar-2020 10:50:54 (UTC+8)-
dc.date.available 6-Mar-2020 10:50:54 (UTC+8)-
dc.date.issued (上傳時間) 6-Mar-2020 10:50:54 (UTC+8)-
dc.identifier.uri (URI) https://ah.lib.nccu.edu.tw/item?item_id=147952-
dc.description.abstract (摘要) AppBeach standing on App Behavior Checker is a new service to reconstruct and report behaviors of iOS mobile applications, using static binary analysis to reveal embedded functions within the executables. AppBeach adopts a distributed algorithm on call sequence counting via the hadoop framework, achieving a scalable static syntax analysis on executables of modern apps. The main idea is syntactically counting call sequences that are embedded in iOS executable. This is done by distributing routines to mappers with the assembly tool that resolves explicit and implicit system method calls that are embedded in the iOS executables. The reducer then collects the counting from mappers to characterize the behaviors of apps. We learn patterns of malicious behaviors from the difference of pairs of normal and malicious apps, and report the probability of potential behaviors of commercial apps by matching these patterns to their call sequence counts.
dc.format.extent 2908432 bytes-
dc.format.mimetype application/pdf-
dc.relation (關聯) Communications of the CCISA, Vol.21, No.2, pp.41-51
dc.title (題名) AppBeach: A Static Behavior Checker for iOS Mobile Applications
dc.type (資料類型) article