1. ZHAW digitalcollection
  2. School of Engineering
  3. Publikationen
  4. Publikationen School of Engineering
Please use this identifier to cite or link to this item: https://doi.org/10.21256/zhaw-28347
Full metadata record
DC FieldValueLanguage
dc.contributor.authorSutter, Thomas-
dc.contributor.authorTellenbach, Bernhard-
dc.date.accessioned2023-07-27T09:21:00Z-
dc.date.available2023-07-27T09:21:00Z-
dc.date.issued2023-05-14-
dc.identifier.isbn979-8-3503-1182-2de_CH
dc.identifier.urihttps://digitalcollection.zhaw.ch/handle/11475/28347-
dc.description.abstractSupply chain attacks are an evolving threat to the IoT and mobile landscape. Recent malware findings have shown that even sizeable mobile phone vendors cannot defend their operating systems fully against pre-installed malware. Detecting and mitigating malware and software vulnerabilities on Android firmware is a challenging task requiring expertise in Android internals, such as customised firmware formats. Moreover, as users cannot choose what software is pre-installed on their devices, there is a fundamental lack of transparency and control. To make Android firmware analysis more accessible and regain some transparency, we present FirmwareDroid, a novel open-source security framework for Android firmware analysis that automates the extraction and analysis of pre-installed software.FirmwareDroid streamlines the process of software extraction from Android firmware for static security and privacy assessments. With FirmwareDroid, we lay the groundwork for researchers to automate the security assessment of Android firmware at scale, and we demonstrated the capabilities of FirmwareDroid by analysing 5,728 Android firmware samples from various vendors. We analysed 75,141 unique pre-installed Android applications to study how common advertising tracker libraries (a piece of software that collects user usage data) are used and which permissions pre-installed Android apps inherit. We conclude that 20.53% of all apps in our dataset include advertising trackers and that 88.14% of all used permissions are signature-based.de_CH
dc.language.isoende_CH
dc.publisherIEEEde_CH
dc.rightshttp://creativecommons.org/licenses/by-nc-nd/4.0/de_CH
dc.subjectAndroidde_CH
dc.subjectFirmwarede_CH
dc.subjectStatic analysisde_CH
dc.subjectSecurityde_CH
dc.subjectTrackingde_CH
dc.subjectPermissionde_CH
dc.subject.ddc005: Computerprogrammierung, Programme und Datende_CH
dc.titleFirmwareDroid : towards automated static analysis of pre-installed android appsde_CH
dc.typeKonferenz: Paperde_CH
dcterms.typeTextde_CH
zhaw.departementSchool of Engineeringde_CH
zhaw.organisationalunitInstitut für Informatik (InIT)de_CH
dc.identifier.doi10.1109/MOBILSoft59058.2023.00009de_CH
dc.identifier.doi10.21256/zhaw-28347-
zhaw.conference.details10th International Conference on Mobile Software Engineering and Systems (MOBILESoft), Melbourne, Australia, 14-15 May 2023de_CH
zhaw.funding.euNode_CH
zhaw.originated.zhawYesde_CH
zhaw.pages.end22de_CH
zhaw.pages.start12de_CH
zhaw.parentwork.editorKlein, Jacques-
zhaw.parentwork.editorWei, Lili-
zhaw.publication.statuspublishedVersionde_CH
zhaw.publication.reviewPeer review (Publikation)de_CH
zhaw.title.proceedings2023 IEEE/ACM 10th International Conference on Mobile Software Engineering and Systems (MOBILESoft)de_CH
zhaw.webfeedInformation Securityde_CH
zhaw.funding.zhawDynamic Analysis of Internal Android Systemsde_CH
zhaw.author.additionalNode_CH
zhaw.display.portraitYesde_CH
Appears in collections:Publikationen School of Engineering

Files in This Item:
File Description SizeFormat 
2023_Sutter-Tellenbach_FirmwareDroid-towards-automated-static-analysis-of-pre-installed-Android-apps.pdf832.73 kBAdobe PDFThumbnail
View/Open
Show simple item record
Sutter, T., & Tellenbach, B. (2023). FirmwareDroid : towards automated static analysis of pre-installed android apps [Conference paper]. In J. Klein & L. Wei (Eds.), 2023 IEEE/ACM 10th International Conference on Mobile Software Engineering and Systems (MOBILESoft) (pp. 12–22). IEEE. https://doi.org/10.1109/MOBILSoft59058.2023.00009
Sutter, T. and Tellenbach, B. (2023) ‘FirmwareDroid : towards automated static analysis of pre-installed android apps’, in J. Klein and L. Wei (eds) 2023 IEEE/ACM 10th International Conference on Mobile Software Engineering and Systems (MOBILESoft). IEEE, pp. 12–22. Available at: https://doi.org/10.1109/MOBILSoft59058.2023.00009.
T. Sutter and B. Tellenbach, “FirmwareDroid : towards automated static analysis of pre-installed android apps,” in 2023 IEEE/ACM 10th International Conference on Mobile Software Engineering and Systems (MOBILESoft), May 2023, pp. 12–22. doi: 10.1109/MOBILSoft59058.2023.00009.
SUTTER, Thomas und Bernhard TELLENBACH, 2023. FirmwareDroid : towards automated static analysis of pre-installed android apps. In: Jacques KLEIN und Lili WEI (Hrsg.), 2023 IEEE/ACM 10th International Conference on Mobile Software Engineering and Systems (MOBILESoft). Conference paper. IEEE. 14 Mai 2023. S. 12–22. ISBN 979-8-3503-1182-2
Sutter, Thomas, and Bernhard Tellenbach. 2023. “FirmwareDroid : Towards Automated Static Analysis of Pre-Installed Android Apps.” Conference paper. In 2023 IEEE/ACM 10th International Conference on Mobile Software Engineering and Systems (MOBILESoft), edited by Jacques Klein and Lili Wei, 12–22. IEEE. https://doi.org/10.1109/MOBILSoft59058.2023.00009.
Sutter, Thomas, and Bernhard Tellenbach. “FirmwareDroid : Towards Automated Static Analysis of Pre-Installed Android Apps.” 2023 IEEE/ACM 10th International Conference on Mobile Software Engineering and Systems (MOBILESoft), edited by Jacques Klein and Lili Wei, IEEE, 2023, pp. 12–22, https://doi.org/10.1109/MOBILSoft59058.2023.00009.


Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.