Mining Sandboxes

Jamrozik, Konrad and Styp-Rekowsky, Philipp von and Zeller, Andreas
(2016) Mining Sandboxes.
In: Proceedings of the 38th International Conference on Software Engineering.
Conference: ICSE International Conference on Software Engineering

Full text not available from this repository.

Abstract

We present sandbox mining, a technique to confine an application to resources accessed during automatic testing. Sandbox mining first explores software behavior by means of automatic test generation, and extracts the set of resources accessed during these tests. This set is then used as a sandbox, blocking access to resources not used during testing. The mined sandbox thus protects against behavior changes such as the activation of latent malware, infections, targeted attacks, or malicious updates. The use of test generation makes sandbox mining a fully automatic process that can be run by vendors and end users alike. Our BOXMATE prototype requires less than one hour to extract a sandbox from an Android app, with few to no confirmations required for frequently used functionality.

Actions

Actions (login required)

View Item View Item