ALAN - Android Malware Evaluating Tools released.

ALAN – Android Malware Evaluating Tools released.

INTRODUCTION
Every day more than 1 million new Android devices are activated worldwide. This trend has made “android” the largest installed base of any mobile platform. Google Play is the premier marketplace for selling and distributing Android apps and it shows incredible numbers: 1.5 billion downloads a month! Everyone agrees that “android” is an incredible success, but are people sure to store their data on their android devices? This success has seen an always-growing android malware author interest.
Google Play is full of well-known free and paid anti-malware.
Are their detection algorithms effective when malware authors try to obfuscate malicious behaviors? To answer to this question we applied several common transformations to a data-set of android malwares. This data-set contains malwares of any android-malware family and is composed of 5560 malwares.
To apply these transformations we developed this framework Alan, it’s an open-source project, and its structure tries to help any possible future improvement.
The framework allows selecting transformations we want to apply.

ABOUT ALAN:

Alan is a transformation engine written in java and developed for an university project in Software security. It allows realizing several transformations to an android application. There is a fixed chain of transformations which can be enabled or disabled by the framework checkboxes.

HOW TO…:

In order to start the engine, You must run the Main.java class, so you can see the engine GUI.
Next, You must add a folder containing the apk files to transform, clicking the “add apk” button.
After selected desired transformations, click the “Start” button to run the engine.

After you click “Start”, the engine will create two folders named “signed” and “evaluated”.
In the “signed” folder ther will be the apk transformed, instead, in the “evaluated” folder, you will find the original apk, which have been processed.

TRANSFORMATIONS CHAIN: 

Once the start button is pressed a windows batch script will be created and executed, storing the selected applications into a specific directory.

Once the start button is pressed a windows batch script will be created and executed, storing the selected applications into a specific directory.

ALAN STRUCTURE:

Read More papers : Malware Vs AntiMalware
————————————————————————

Download : Master.zip  | Clone Url
Source : https://github.com/faber03
DEVELOPERS:
Agostino De Lucia – agostino.delucia@hotmail.it
Michele Mennino – michele.meninno@gmail.com
Pasquale Battista – pas.battista@gmail.com
Raffaele Esposito – e_raffaele@alice.it