Please use this identifier to cite or link to this item:
https://doi.org/10.21256/zhaw-28347| Publication type: | Conference paper |
| Type of review: | Peer review (publication) |
| Title: | FirmwareDroid : towards automated static analysis of pre-installed android apps |
| Authors: | Sutter, Thomas Tellenbach, Bernhard |
| et. al: | No |
| DOI: | 10.1109/MOBILSoft59058.2023.00009 10.21256/zhaw-28347 |
| Proceedings: | 2023 IEEE/ACM 10th International Conference on Mobile Software Engineering and Systems (MOBILESoft) |
| Editors of the parent work: | Klein, Jacques Wei, Lili |
| Page(s): | 12 |
| Pages to: | 22 |
| Conference details: | 10th International Conference on Mobile Software Engineering and Systems (MOBILESoft), Melbourne, Australia, 14-15 May 2023 |
| Issue Date: | 14-May-2023 |
| Publisher / Ed. Institution: | IEEE |
| ISBN: | 979-8-3503-1182-2 |
| Language: | English |
| Subjects: | Android; Firmware; Static analysis; Security; Tracking; Permission |
| Subject (DDC): | 005: Computer programming, programs and data |
| Abstract: | Supply chain attacks are an evolving threat to the IoT and mobile landscape. Recent malware findings have shown that even sizeable mobile phone vendors cannot defend their operating systems fully against pre-installed malware. Detecting and mitigating malware and software vulnerabilities on Android firmware is a challenging task requiring expertise in Android internals, such as customised firmware formats. Moreover, as users cannot choose what software is pre-installed on their devices, there is a fundamental lack of transparency and control. To make Android firmware analysis more accessible and regain some transparency, we present FirmwareDroid, a novel open-source security framework for Android firmware analysis that automates the extraction and analysis of pre-installed software.FirmwareDroid streamlines the process of software extraction from Android firmware for static security and privacy assessments. With FirmwareDroid, we lay the groundwork for researchers to automate the security assessment of Android firmware at scale, and we demonstrated the capabilities of FirmwareDroid by analysing 5,728 Android firmware samples from various vendors. We analysed 75,141 unique pre-installed Android applications to study how common advertising tracker libraries (a piece of software that collects user usage data) are used and which permissions pre-installed Android apps inherit. We conclude that 20.53% of all apps in our dataset include advertising trackers and that 88.14% of all used permissions are signature-based. |
| URI: | https://digitalcollection.zhaw.ch/handle/11475/28347 |
| Fulltext version: | Published version |
| License (according to publishing contract): | CC BY-NC-ND 4.0: Attribution - Non commercial - No derivatives 4.0 International |
| Departement: | School of Engineering |
| Organisational Unit: | Institute of Computer Science (InIT) |
| Published as part of the ZHAW project: | Dynamic Analysis of Internal Android Systems |
| Appears in collections: | Publikationen School of Engineering |
Files in This Item:
| File | Description | Size | Format | |
|---|---|---|---|---|
| 2023_Sutter-Tellenbach_FirmwareDroid-towards-automated-static-analysis-of-pre-installed-Android-apps.pdf | 832.73 kB | Adobe PDF |  View/Open |
Show full item record
Sutter, T., & Tellenbach, B. (2023). FirmwareDroid : towards automated static analysis of pre-installed android apps [Conference paper]. In J. Klein & L. Wei (Eds.), 2023 IEEE/ACM 10th International Conference on Mobile Software Engineering and Systems (MOBILESoft) (pp. 12–22). IEEE. https://doi.org/10.1109/MOBILSoft59058.2023.00009
Sutter, T. and Tellenbach, B. (2023) ‘FirmwareDroid : towards automated static analysis of pre-installed android apps’, in J. Klein and L. Wei (eds) 2023 IEEE/ACM 10th International Conference on Mobile Software Engineering and Systems (MOBILESoft). IEEE, pp. 12–22. Available at: https://doi.org/10.1109/MOBILSoft59058.2023.00009.
T. Sutter and B. Tellenbach, “FirmwareDroid : towards automated static analysis of pre-installed android apps,” in 2023 IEEE/ACM 10th International Conference on Mobile Software Engineering and Systems (MOBILESoft), May 2023, pp. 12–22. doi: 10.1109/MOBILSoft59058.2023.00009.
SUTTER, Thomas und Bernhard TELLENBACH, 2023. FirmwareDroid : towards automated static analysis of pre-installed android apps. In: Jacques KLEIN und Lili WEI (Hrsg.), 2023 IEEE/ACM 10th International Conference on Mobile Software Engineering and Systems (MOBILESoft). Conference paper. IEEE. 14 Mai 2023. S. 12–22. ISBN 979-8-3503-1182-2
Sutter, Thomas, and Bernhard Tellenbach. 2023. “FirmwareDroid : Towards Automated Static Analysis of Pre-Installed Android Apps.” Conference paper. In 2023 IEEE/ACM 10th International Conference on Mobile Software Engineering and Systems (MOBILESoft), edited by Jacques Klein and Lili Wei, 12–22. IEEE. https://doi.org/10.1109/MOBILSoft59058.2023.00009.
Sutter, Thomas, and Bernhard Tellenbach. “FirmwareDroid : Towards Automated Static Analysis of Pre-Installed Android Apps.” 2023 IEEE/ACM 10th International Conference on Mobile Software Engineering and Systems (MOBILESoft), edited by Jacques Klein and Lili Wei, IEEE, 2023, pp. 12–22, https://doi.org/10.1109/MOBILSoft59058.2023.00009.
Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.