Unmasking Android Obfuscation Tools Using Spatial Analysis

Kaur, Ratinder; Ye, Ning; Gonzalez, Hugo; Stakhanova, Natalia

doi:10.1109/pst.2018.8514207

Cited by 5 publications

(1 citation statement)

References 19 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The inspection was done manually, and has aided by the fact Android binaries are generally structured; hence, color coding techniques based on the structure were utilized to improve understanding. This work was expanded to include predicting what type of obfuscation was being used; accuracy of nearly 90% were achieved [35].…”

Section: Related Researchmentioning

confidence: 99%

Container and VM Visualization for Rapid Forensic Analysis

Shropshire

Benton

2020

Proceedings of the Annual Hawaii International Conference on System Sciences

View full text Add to dashboard Cite

Most cloud security incidents are initially detected by automated monitoring tools. Because they are tuned to minimize the risk of false-negative errors, these tools cast a wide net of suspicion. Depending on the scale of the incident, the automated tools may implicate rather long lists of VMs and containers. Hence, this study proposes a new intermediate step aimed at reducing the number of VMs and containers awaiting forensic investigation. The proposed method renders two-dimensional visualizations of container contents and virtual machine disk images. The visualizations can be used to fingerprint container / VM contents, pinpoint instances of embedded malware, and find modified code. The proof of concept is evaluated in a pilot study. The results indicate that it shows promise. Implications and future research directions are also described.

show abstract

Section: Related Researchmentioning

confidence: 99%