Design and Implementation of an Android Host-based Intrusion Prevention System

Presentation pdf 1.1MB

We analyze the implementations, strengths and weaknesses of three popular host-based intrusion prevention systems (HIPS) for Android and demonstrate a severe vulnerability of a HIPS product. Then we present Patronus, which is a secure and extensible HIPS platform. Patronus not only provides intrusion prevention capability, it can also dynamically detect existing malware based on runtime information.

Author(s):

Mingshen Sun    
The Chinese University of Hong Kong
Hong Kong

Min Zheng    
The Chinese University of Hong Kong
Hong Kong

John C.S. Lui    
The Chinese University of Hong Kong
Hong Kong

Xuxian Jiang    
North Carolina State University
United States