Android Rooting: An Arms Race between Evasion and Detection
Joint Authors
Nguyen-Vu, Long
Chau, Ngoc-Tu
Kang, Seongeun
Jung, Souhwan
Source
Security and Communication Networks
Issue
Vol. 2017, Issue 2017 (31 Dec. 2017), pp.1-13, 13 p.
Publisher
Hindawi Publishing Corporation
Publication Date
2017-10-29
Country of Publication
Egypt
No. of Pages
13
Main Subjects
Information Technology and Computer Science
Abstract EN
We present an arms race between rooting detection and rooting evasion.
We investigate different methods to detect rooted device at both Java and native level and evaluate the counterattack from major hooking tools.
To this end, an extensive study of Android rooting has been conducted, which includes the techniques to root the device and make it invisible to the detection of mobile antimalware product.
We then analyze the evasion loopholes and in turn enhance our rooting detection tool.
We also apply evasion techniques on rooted device and compare our work with 92 popular root checking applications and 18 banking and finance applications.
Results show that most of them do not suffice and can be evaded through API hooking or static file renaming.
Furthermore, over 28000 Android applications have been analyzed and evaluated in order to diagnose the characteristics of rooting in recent years.
Our study shows that rooting has become more and more prevalent as an inevitable trend, and it raises big security concerns regarding detection and evasion.
As a proof of concept, we have published our rooting detection application to Google Play Store to demonstrate the work presented in this paper.
American Psychological Association (APA)
Nguyen-Vu, Long& Chau, Ngoc-Tu& Kang, Seongeun& Jung, Souhwan. 2017. Android Rooting: An Arms Race between Evasion and Detection. Security and Communication Networks،Vol. 2017, no. 2017, pp.1-13.
https://search.emarefa.net/detail/BIM-1202895
Modern Language Association (MLA)
Nguyen-Vu, Long…[et al.]. Android Rooting: An Arms Race between Evasion and Detection. Security and Communication Networks No. 2017 (2017), pp.1-13.
https://search.emarefa.net/detail/BIM-1202895
American Medical Association (AMA)
Nguyen-Vu, Long& Chau, Ngoc-Tu& Kang, Seongeun& Jung, Souhwan. Android Rooting: An Arms Race between Evasion and Detection. Security and Communication Networks. 2017. Vol. 2017, no. 2017, pp.1-13.
https://search.emarefa.net/detail/BIM-1202895
Data Type
Journal Articles
Language
English
Notes
Includes bibliographical references
Record ID
BIM-1202895