Enabling automatic protocol behavior analysis for android applications = 안드로이드 애플리케이션의 네트워크 행동패턴 분석 자동화 연구

Android application is an important class on today’s Internet. While understanding app-specific behavior is important for network operation and management, it is often difficult because it requires an in-depth application-layer protocol analysis due to the common use of HTTP(S) and standard data representations (e.g., JSON). this paper presents Extractocol the first system to offer an automatic and comprehensive analysis of application protocol behaviors. Extractocol only uses Android application binary as input and accurately reconstructs HTTP transactions (request-response pairs) and identifies their message format and relationships using binary analysis. Our evaluation and in-depth case studies on commercial and open-source apps demonstrate that Extractocol provides high coverage and accurately characterizes network-related application behaviors.
Advisors
Han, Dong Suresearcher한동수researcher
Publisher
한국과학기술원
Issue Date
2016
Identifier
325007
Language
eng
Description

학위논문(석사) - 한국과학기술원 : 정보보호대학원, 2016.2 ,[iv, 32 p. :]

Keywords

Application layer; Reverse-engineering; Program Analysis; Network Message Format; Application Network Behavior Analysis; 응용계층; 역공학; 프로그램분석; 네트워크 메시지 포멧; 애플리케이션 네트워크 행동패턴 분석

URI
http://hdl.handle.net/10203/221954
Link
http://library.kaist.ac.kr/search/detail/view.do?bibCtrlNo=649702&flag=t
Appears in Collection
IS-Theses_Master(석사논문)
Files in This Item
There are no files associated with this item.
  • Hit : 123
  • Download : 0
  • Cited 0 times in thomson ci

qr_code

  • mendeley

    citeulike


rss_1.0 rss_2.0 atom_1.0