TY - GEN
T1 - A Dynamic Approach for Detecting Device Administrator Abuse in Android
AU - Shan, Zhiyong
AU - Neamtiu, Iulian
AU - Wang, Xin
N1 - Publisher Copyright:
© 2025 IEEE.
PY - 2025
Y1 - 2025
N2 - Device Administrator (DA) in mobile OSes can manage smart phone or perform parental control. But it also can be used to develop ransomware, then the user has to factory-reset the phone. The DA apps that cannot be uninstalled are called as 'Deathless Device Administrator' (DDA). In this work, we built the first dynamic analyzer named DAAT, which is able to detect DDA apps. In the experiment, our DAAT successfully found 4,962 DA apps and 770 DDA apps from 47,350 candidate apps. We further manually checked these 4,962 apps on more than 3 smart phones and confirmed 715 true DDA apps. Some of the DDA apps are still listed on Google Play Store. The experiment results show that our DAAT is effective (90.5% F-measure) and efficient (226 seconds per app).
AB - Device Administrator (DA) in mobile OSes can manage smart phone or perform parental control. But it also can be used to develop ransomware, then the user has to factory-reset the phone. The DA apps that cannot be uninstalled are called as 'Deathless Device Administrator' (DDA). In this work, we built the first dynamic analyzer named DAAT, which is able to detect DDA apps. In the experiment, our DAAT successfully found 4,962 DA apps and 770 DDA apps from 47,350 candidate apps. We further manually checked these 4,962 apps on more than 3 smart phones and confirmed 715 true DDA apps. Some of the DDA apps are still listed on Google Play Store. The experiment results show that our DAAT is effective (90.5% F-measure) and efficient (226 seconds per app).
KW - Android
KW - Device Administrator
KW - Dynamic Analysis
UR - https://www.scopus.com/pages/publications/105038025300
U2 - 10.1109/AICSIP65423.2025.11427232
DO - 10.1109/AICSIP65423.2025.11427232
M3 - Conference contribution
AN - SCOPUS:105038025300
T3 - 2025 IEEE 7th International Conference on Artificial Intelligence, Computer Science, and Information Processing, AICSIP 2025
BT - 2025 IEEE 7th International Conference on Artificial Intelligence, Computer Science, and Information Processing, AICSIP 2025
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 7th IEEE International Conference on Artificial Intelligence, Computer Science, and Information Processing, AICSIP 2025
Y2 - 25 July 2025 through 27 July 2025
ER -