Description Company: None

TSOPEN

Keywords: Logic bomb detection, Android Security

Functional Components Description

Logic bombs are mechanisms used by malicious apps to evade detection techniques. Typically, an attacker uses logic bomb to trigger the malicious code only under certain chosen circumstances (e.g. only at a given date) to avoid being detected by the analysis. The goal of TSOpen is to detect such logic bombs. The approach used to perform the detection is fully static and combine multiple techniques such as symbolic execution, path predicate reconstruction, path predicate minimization, and inter-procedural control-dependency analysis. In a first version, TSOpen will focus on detecting triggers related to time, location and SMS.TSOpen is developed over Flowdroid which provides a useful model of the Android Framework on which one can easily apply algorithms. Figure 3.16 provides an overview of the tool. First, an inter-procedural control flow graph from Flowdroid is retrieved on which TSOpen applies a symbolic execution in order to retrieve the semantic of objects of interest. Then simple predicates are retrieved during the block predicate recovery to annotate the ICFG. The annotated ICFG is then used to retrieve the full path predicate of every instructions. A predicate minimization algorithm is then applied in order to rule out false dependencies. Afterwards, a first decision is taken during the predicate classification step to get suspicious predicates. Finally, a control dependency step is applied in order to take the decision regarding the suspiciousness of the potential logic bomb under study.

Services Provided:

• Support platform for R + D + I projects
• - TSOpen tool has been developed under an internal project at The University of Luxembourg. It is to be used in order to detect so-called logic bombs in potential new Android Malware. If precision is proven to be effective, the tool could be leveraged on Android applications before entering a store.
• - Benchmarking, evaluation and / or certification of products and / or services
• - It has been evaluated on several hundred of thousands applications.
• - Training
• - The approaches used for building this tool could be used as a support for training to Android Applications Static Analysis methods.
• - Support for awareness actions or generation of Functional Safety culture in different domains
• - Currently, Anti-Malware companies have increasing concerns with respect to the growing number of new malware and new malicious techniques used in Applications. Security threats are ubiquitous in nowadays mobiles. Therefore, new approaches could be leveraged in order to appease those threats.

Services:

• - Support platform for R + D + I projects: detects so-called logic bombs in potential new Android Malware. If precision is proven to be effective, the tool could be leveraged on Android applications before entering a store.
• - Training: The approaches used for building this tool could be used as a support for training to Android Applications Static Analysis methods.
• - Support for awareness actions or generation of Functional Safety culture in different domains: Currently, Anti-Malware companies have increasing concerns with respect to the growing number of new malware and new malicious techniques used in Applications. Security threats are ubiquitous in nowadays mobiles. Therefore, new approaches could be leveraged in order to appease those threats

Use Request Non-profit




SafeCommit

Keywords: Vulnerability Detection Tool, DevOps Communities

Functional Components Description

The goal of this tool is twofold:
First, detection of patches which fix software vulnerabilities. To that end, both code and textual features will be engineered and assessed. These features will be then used by machine learning algorithms designed and selected to cope with unbalanced datasets. Second, detection of patches which introduce software vulnerabilities. Like mentioned previously, code and textual features will be investigated, but it is highly probable that the features are different. The proposed tool aims at being integrated into real-world software maintenance and usage workflows. The objective is to carry out a live study in order to collect practitioner feedback for iteratively improving the tuning of the research output, towards an effective technology transfer.

Services Provided:

• - Support platform for R + D + I projects
• - SafeCommit tool has been developed under an internal project at The University of Luxembourg. It is to be used in order to detect commits introducing vulnerabilities and commit fixing vulnerabilities.
• - Benchmarking, evaluation and / or certification of products and / or services
• - None yet.
• - Training
• - The approaches used for building this tool could be used as a support for training to automated vulnerability detection and machine learning.
• - Support for awareness actions or generation of Functional Safety culture in different domains
• - Currently, developers tend to prioritize an early date for a software and not the correct building of the software. Hence, the introduction of vulnerabilities is more likely due to time constraints and poor code quality. This tool could lower the number of vulnerabilities introduced by leveraging it before committing new code.

Services:

• - Support platform for R + D + I projects: Detects commits introducing vulnerabilities and commit fixing vulnerabilities.
• - Training: The approaches used for building this tool could be used as a support for training to automated vulnerability detection and machine learning.
• - Support for awareness actions or generation of Functional Safety culture in different domains: Currently, developers tend to prioritize an early date for a software and not the correct building of the software. Hence, the introduction of vulnerabilities is more likely due to time constraints and poor code quality. This tool could lower the number of vulnerabilities introduced by leveraging it before committing new code.

Use Request Non-profit