SoProtector: securing native C/C++ libraries for mobile applications

Ning Zhang, Guangquan Xu*, Guozhu Meng, Xi Zheng

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference proceeding contributionpeer-review

1 Citation (Scopus)

Abstract

Java code is easy to be decompiled, and third-party SO files are used frequently by developers to improve development efficiency. Therefore, more and more core functions of Android applications are implemented in the native layer. However, there is neither comprehensive security research work nor automated security analysis tools on Android native layer, especially for third-party SO files that are dynamically loaded within the applications. To solve this problem, SoProtector, a novel and effective system is proposed to defend against the privacy leaks, which mainly analyzes the data stream between two levels: application and Native layers. In addition, SoProtector includes a real-time monitor to detect malicious functions in binary code. Our evaluation using 3400 applications has demonstrated that SoProtector can detect more sources, sinks and smudges than most static analysis tools; And it detects and effectively blocks more than 82% of applications that dynamically load malicious third-party SO files with low performance overhead.

Original languageEnglish
Title of host publicationAlgorithms and Architectures for Parallel Processing
Subtitle of host publication18th International Conference, ICA3PP 2018, Proceedings, Part III
EditorsJaideep Vaidya, Jin Li
Place of PublicationSwitzerland
PublisherSpringer-VDI-Verlag GmbH & Co. KG
Pages417-431
Number of pages15
ISBN (Electronic)9783030050573
ISBN (Print)9783030050566
DOIs
Publication statusPublished - 1 Jan 2018
Event18th International Conference on Algorithms and Architectures for Parallel Processing, ICA3PP 2018 - Guangzhou, China
Duration: 15 Nov 201817 Nov 2018

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume11336 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference18th International Conference on Algorithms and Architectures for Parallel Processing, ICA3PP 2018
Country/TerritoryChina
CityGuangzhou
Period15/11/1817/11/18

Keywords

  • Android
  • Mobile privacy
  • Mobile security
  • Native C/C++ libraries

Fingerprint

Dive into the research topics of 'SoProtector: securing native C/C++ libraries for mobile applications'. Together they form a unique fingerprint.

Cite this