Mobile OS Vulnerabilities

Quantitative and Qualitative Analysis

Shivi Garg, Niyati Baliyan

• Publisher: CRC Press
• Year: 2023
• eBook ISBN: 9781000924510
• Edition: 1
• Topic: Computer Science
• Subtopic: Computer Networking
• Index: Computer Science

This is book offers in-depth analysis of security vulnerabilities in different mobile operating systems. It provides methodology and solutions for handling Android malware and vulnerabilities and transfers the latest knowledge in machine learning and deep learning models towards this end. Further, it presents a comprehensive analysis of software vulnerabilities based on different technical parameters such as causes, severity, techniques, and software systems' type. Moreover, the book also presents the current state of the art in the domain of software threats and vulnerabilities. This would help analyze various threats that a system could face, and subsequently, it could guide the securityengineer to take proactive and cost-effective countermeasures.

Security threats are escalating exponentially, thus posing a serious challenge to mobile platforms. Android and iOS are prominent due to their enhanced capabilities and popularity among users. Therefore, it is important to compare these two mobile platforms based on security aspects. Android proved to be more vulnerable compared to iOS. The malicious apps can cause severe repercussions such as privacy leaks, app crashes, financial losses (caused by malware triggered premium rate SMSs), arbitrary code installation, etc. Hence, Android security is a major concern amongst researchers as seen in the last few years. This book provides an exhaustive review of all the existing approaches in a structured format.

The book also focuses on the detection of malicious applications that compromise users' security and privacy, the detection performance of the different program analysis approach, and the influence of different input generators during static and dynamic analysis on detection performance. This book presents a novel method using an ensemble classifier scheme for detecting malicious applications, which is less susceptible to the evolution of the Android ecosystem and malware compared to previous methods.The book also introducesan ensemble multi-class classifier scheme to classify malware into known families. Furthermore, we propose a novel framework of mapping malware to vulnerabilities exploited using Android malware's behavior reports leveraging pre-trained language models and deep learning techniques. The mapped vulnerabilities can then be assessed on confidentiality, integrity, and availability on different Android components and sub-systems, and different layers.

Table of contents

• Cover
• Half Title
• Title
• Copyright
• Contents
• About the Authors
• 1 Introduction
• 2 Background
• 3 Relevant Works and Studies Related to Android and iOS
• 4 A Parallel Classifier Scheme for Vulnerability Detection in Android
• 5 Classification of Android Malware Using Ensemble Classifiers
• 6 Text Processing–Based Malware-to-Vulnerability Mapping for Android
• 7 Android Vulnerabilities Impact Analysis on the Confidentiality, Integrity, and Availability Triad at the Architectural Level
• 8 Conclusion and Future Directions
• Appendix A Android Malware Behavior
• References