TY - GEN
T1 - Dynamic Taint Tracking Simulation
AU - Berner, Fabian
AU - Mayrhofer, Rene
AU - Sametinger, Johannes
PY - 2020/7
Y1 - 2020/7
N2 - Detection of unauthorized disclosure of sensitive data is still an open problem. Taint tracking is one effective approach to detect information disclosure attacks. In this paper, we give an overview of dynamic taint tracking systems for Android. First, we discuss systems and identify their shortcomings. The contribution of this paper is to present a novel solution for these shortcomings. For that purpose, we have developed a simulation concept and a prototype implementation. Special features are the possibility to record simulations and play them back automatically. By comparing the original simulation with a repeated simulation a changed security level can be detected.
AB - Detection of unauthorized disclosure of sensitive data is still an open problem. Taint tracking is one effective approach to detect information disclosure attacks. In this paper, we give an overview of dynamic taint tracking systems for Android. First, we discuss systems and identify their shortcomings. The contribution of this paper is to present a novel solution for these shortcomings. For that purpose, we have developed a simulation concept and a prototype implementation. Special features are the possibility to record simulations and play them back automatically. By comparing the original simulation with a repeated simulation a changed security level can be detected.
U2 - 10.1007/978-3-030-52686-3_9
DO - 10.1007/978-3-030-52686-3_9
M3 - Conference proceedings
SN - 978-3-030-52685-6
VL - 1247
T3 - Communications in Computer and Information Science
SP - 223
EP - 227
BT - SE-Business and Telecommunications. 16th International Conference, ICETE 2019, Prague, Czech Republic, July 26–28, 2019, Revised Selected Papers
A2 - Mohammad S. Obaidat, null
PB - Springer
ER -