Home Science DroidForensics: Accurate Reconstruction of Android Attacks via Multi-layer Forensic Logging

DroidForensics: Accurate Reconstruction of Android Attacks via Multi-layer Forensic Logging

10
0
12,846

The goal of cyber attack investigation is to fully reconstruct the details of an attack, so we can trace back to its origin, and recover the system from the damage caused by the attack. However, it is often difficult and requires tremendous manual efforts because attack events occurred days or even weeks before the investigation and detailed information we need is not available anymore. Consequently, forensic logging is significantly important for cyber attack investigation. In this paper, the authors present DroidForensics, a multi-layer forensic logging technique for Android. Their goal is to provide the user with detailed information about attack behaviors that can enable accurate post-mortem investigation of Android attacks. DroidForensics consists of three logging modules. API logger captures Android API calls that contain high-level semantics of an application. Binder logger records interactions between applications to identify causal relations between processes, and system call logger efficiently monitors low-level system events. They also provide the user interface that the user can compose SQL-like queries to inspect an attack. Their experiments show that Droid Forensics has low runtime overhead (2.9% on average) and low space overhead (105 ~ 169 MByte during 24 hours) on real Android devices. It is effective in the reconstruction of real world Android attacks they have studied.

asiaccs17
Load More Related Articles
Load More In Science

10 Comments

  1. 2lullaby

    December 30, 2021 at 9:51 pm

    1repudiated

  2. gay men dating free

    January 2, 2022 at 1:22 pm

    adam4adam gay online dating https://gay-buddies.com

  3. gay dating charlotte nc

    January 2, 2022 at 4:22 pm

    gay tommy defendi the dating game https://gayfade.com

  4. 1advocated

    January 13, 2022 at 12:15 am

    3cistern

  5. 2vestibule

    January 13, 2022 at 12:33 am

    2telegraphy

  6. gay chat rooms no registration

    January 14, 2022 at 12:20 pm

  7. curious gay dating

    January 14, 2022 at 1:25 pm

    bi/gay dating https://gaypridee.com/

  8. gay free chat

    January 14, 2022 at 5:02 pm

    michigan gay chat https://gaytgpost.com/

  9. gay chat tucson

    January 14, 2022 at 9:08 pm

    gay phone chat line numbers https://gay-buddies.com/

  10. gay college humor dating girlfriend

    January 15, 2022 at 11:53 am

    gay dating apps for pc https://speedgaydate.com/