About this project
Description from the program archive
<p>Many Android apps are using sandbox-detection techniques, and here is an <a href="https://github.com/strazzere/anti-emulator" target="_blank">example</a>. To make things worse, there are malware using the sandbox-detection techniques in order to escape from being detected by automatic dynamic app testing services and attack real users only, according to a study from Kim, Mijoo, et al., 2016. As a result, three research questions can be raised:</p> <ol> <li>RQ1: What sandbox-detection techniques are applied in Android apps, and how and to what extent are they applied?</li> <li>RQ2: Is there a method capable of detecting such sandbox-detection techniques given a sample app?</li> <li>RQ3: Is there an app analysis solution undetectable by common sandbox-detection methods?</li> </ol> <p>The goal of the Android sandbox detection and countermeasure project is solving the problems mentioned above. This can be separated into finer stages:</p> <ol> <li>Investigating and collecting sandbox-detection techniques used in Android app (especially malware), and implementing a sample app using those techniques.</li> <li>Implementing a detection-aware system.</li> <li>Implementing an undetectable system.</li> </ol>