Mapping System Level Behaviors with Android APIs Via System Call Dependence Graphs

摘要

Due to Android’s open source feature and low barriers to entry for developers, millions ofdevelopers and third-party organizations have been attracted into the Android ecosystem.However, over 90% of mobile malware are found targeted on Android. Though Androidprovides multiple security features and layers to protect user data and system resources, thereare still some over-privileged applications in Google Play Store or third-party Android appstores at wild. In this paper, we proposed an approach to map system level behavior andAndroid APIs, based on the observation that system level behaviors cannot be avoided butsensitive Android APIs could be evaded. To the best of our knowledge, our approach providesthe first work to map system level behavior and Android APIs through System Call DependenceGraphs. The study also shows that our approach can effectively identify potential permissionabusing, with almost negligible performance impact.