Header: christian-rossow.de
Apply for a PhD/PostDoc position in my System Security research group at Saarland University.


If you can't explain it simply, you don't understand it well enough.

TraceDroid: Dynamic Malware Analysis for Android

TraceDroid is a modified Android OS that generates comprehensive method traces for a given Android application. In particular, we modified Android's Dalvik Virtual Machine that already provides comprehensive method trace output and automated the "profiler" process for better malware analysis. Most of the work involved modifying the existing dvmMethodTraceAdd() function in Profile.c which is called each time a method is entered or left.

The TraceDroid Analysis Platform (TAP) is a framework that uses TraceDroid to perform dynamic analysis of unknown Android applications. TAP aims to maximize the observed malware behavior by simulating certain events and includes a number of plug-ins to ease post-analysis of unknown applications, as well as to measure the effectiveness of the executed dynamic analysis.

TraceDroid now has become public - please give at try!