안드로이드 스마트폰 상에서 악성앱 및 악성앱에 의한 개인 정보 유출 탐지

Android adopts a permission based security model, so each user has a responsibility to check and accept permissions requested during installing a new application. However, it is very hard for users to distinguish malwares with only requested permissions. Consequently, many malwares exploit the model by requesting excessive permissions which are required to steal private user data. Therefore, we need a solution to detect malwares with high accuracy and to protect private data from security threats. In this paper, we propose a new approach which can hide specific data or provide fake data when an application requests contacts data in Android according to predefined policies. The fake data are not only used to protect private data but also used to detect the malware which leaked them. Moreover, our approach consumes much smaller memory and achieves a high speed of accessing a database. With these features, it is very effective to protect our private data from various security threats.