2026-04-07T10:21:15Zhttps://ebiltegia.mondragon.edu/oai/request

oai:ebiltegia.mondragon.edu:20.500.11984/59322024-03-04T12:13:19Zcom_20.500.11984_1143col_20.500.11984_1148

00925njm 22002777a 4500 dc Zurutuza, Urko author 2018 Nowadays, with the predominance of smart devices such as smartphones, mobile malware attacks have increasingly proliferated. There is an urgent need of detecting potential malicious behaviors so as to hinder them. Furthermore, Android malware is one of the major security issues and fast growing threats facing the Internet in the mobile arena. At the same time, DNS (Domain Name System) is widely misused by miscreants in order to provide Internet connection within malicious networks. Here, we propose an infrastructure for monitoring the Android applications in a platform-independent manner, introducing hooks in order to trace restricted API calls used at runtime of the application. These traces are collected at a central server were the application behavior filtering, string matching, and visualization takes place. From these traces we can extract malicious URLs and correlate them with DNS service network traffic, enabling us to find presence of malware running at the network level. 9781538635094 https://katalogoa.mondragon.edu/janium-bin/janium_login_opac.pl?find&ficha_no=154545 https://hdl.handle.net/20.500.11984/5932 Android malware API calls Dynamic behavior analysis DNS queries Collaborative framework A collaborative framework for android malware detection using DNS & dynamic analysis