SAM: The Static Analysis Module of the MAVERIC Mobile App Security Verification Platform

  • Alessandro Armando
  • Gianluca Bocci
  • Giantonio Chiarelli
  • Gabriele Costa
  • Gabriele De Maglie
  • Rocco Mammoliti
  • Alessio Merlo
Conference paper

DOI: 10.1007/978-3-662-46681-0_19

Part of the Lecture Notes in Computer Science book series (LNCS, volume 9035)
Cite this paper as:
Armando A. et al. (2015) SAM: The Static Analysis Module of the MAVERIC Mobile App Security Verification Platform. In: Baier C., Tinelli C. (eds) Tools and Algorithms for the Construction and Analysis of Systems. TACAS 2015. Lecture Notes in Computer Science, vol 9035. Springer, Berlin, Heidelberg

Abstract

The tremendous success of the mobile application paradigm is due to the ease with which new applications are uploaded by developers, distributed through the application markets (e.g. Google Play), and finally installed by the users. Yet, the very same model is causing serious security concerns, since users have no or little means to ascertain the trustworthiness of the applications they install on their devices. To protect their customers, Poste Italiane has defined the Mobile Application Verification Cluster (MAVERIC), a process for the systematic security analysis of third-party mobile apps that leverage the online services provided by the company (e.g. home banking, parcel tracking). We present SAM, a toolkit that supports this process by automating a number of operations including reverse engineering, privilege analysis, and automatic verification of security properties. We introduce the functionalities of SAM through a demonstration of the platform applied to real Android applications.

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2015

Authors and Affiliations

  • Alessandro Armando
    • 1
    • 2
  • Gianluca Bocci
    • 3
  • Giantonio Chiarelli
    • 3
  • Gabriele Costa
    • 1
  • Gabriele De Maglie
    • 1
  • Rocco Mammoliti
    • 3
  • Alessio Merlo
    • 1
  1. 1.DIBRISUniversity of GenovaGenovaItaly
  2. 2.Bruno Kessler FoundationTrentoItaly
  3. 3.Poste ItalianeRomaItaly

Personalised recommendations