Analyse de maliciels sur Android par l'analyse de la mémoire vive

Authors: Lebel, Bernard
Advisor: Mejri, Mohamed
Abstract: Mobile devices are at the core of modern society. Their versatility has allowed third-party developers to generate a rich experience for the user through mobile apps of all types (e.g. productivity, games, communications). As mobile platforms have become connected devices that gather nearly all of our personal and professional information, they are seen as a lucrative market by malware developers. Android is an open-sourced operating system from Google targeting specifically the mobile market and has been targeted by malicious activity due the widespread adoption of the latter by the consumers. As Android malwares threaten many consumers, it is essential that research in malware analysis address specifically this mobile platform. The work conducted during this Master’s focuses on the analysis of malwares on the Android platform. This was achieved through a literature review of the current malware trends and the approaches in static and dynamic analysis that exists to mitigate them. It was also proposed to explore live memory forensics applied to the analysis of malwares as a complement to existing methods. To demonstrate the applicability of the approach and its relevance to the Android malwares, a case study was proposed where an experimental malware has been designed to express malicious behaviours difficult to detect through current methods. The approach explored is called differential live memory analysis. It consists of analyzing the difference in the content of the live memory before and after the deployment of the malware. The results of the study have shown that this approach is promising and should be explored in future studies as a complement to current approaches.
Document Type: Mémoire de maîtrise
Issue Date: 2018
Open Access Date: 24 May 2018
Permalink: http://hdl.handle.net/20.500.11794/29851
Grantor: Université Laval
Collection:Thèses et mémoires

Files in this item:
SizeFormat 
34353.pdf1.59 MBAdobe PDFView/Open
All documents in CorpusUL are protected by Copyright Act of Canada.