Apply for a PostDoc position in my System Security research group at CISPA, Germany.

https://www.christian-rossow.de

If you can't explain it simply, you don't understand it well enough.

TraceDroid: Dynamic Malware Analysis for Android

Victor van der Veen, one of my former MSc students at the VU Amsterdam, has developed TraceDroid, a platform to analyize Android malware. We just launched TraceDroid and presented our work at the Hack-in-the-Box conference in Kuala Lumpur.

TraceDroid is a modified Android OS that generates comprehensive method traces for a given Android application. In particular, we modified Android's Dalvik Virtual Machine that already provides comprehensive method trace output and automated the "profiler" process for better malware analysis. Most of the work involved modifying the existing dvmMethodTraceAdd() function in Profile.c which is called each time a method is entered or left.

The TraceDroid Analysis Platform (TAP) is a framework that uses TraceDroid to perform dynamic analysis of unknown Android applications. TAP aims to maximize the observed malware behavior by simulating certain events and includes a number of plug-ins to ease post-analysis of unknown applications, as well as to measure the effectiveness of the executed dynamic analysis.

TraceDroid now has become public - please give at try!