Mobile Malware Research Project

Research links

OWASP Mobile Top Ten :

Industry was polled about the top 10 vulnerabilities statistics in mobile applications.

[https://www.owasp.org/index.php/Projects/OWASP_Mobile_Security_Project_-_Top_Ten_Mobile_Risks]

Infosec Institute, Mobile Malware analysis

Various technique used in mobile malware application analysis

[http://resources.infosecinstitute.com/android-malware-analysis/]

A Look at Google Bouncer :

Researcher successfully evaded from Google Bouncer, Google's official dynamic application analysis test bed

[http://blog.trendmicro.com/trendlabs-security-intelligence/a-look-at-google-bouncer/]

JoeSecurity Joe Sandbox - malware analysis

Hybrid approach to Android application analysis

[http://www.joesecurity.org/joe-sandbox-reports#android]

Nyxbone malware

Multiple android malware anslysis tools

[http://www.nyxbone.com/malware/android_tools.html]

DIY - OBAD Android malware analysis

DIY - Android malware analysis : Taking OBAD apart

DIY series on how to take apart and analyze the OBAD android malware sample.

[https://securityintelligence.com/diy-android-malware-analysis-taking-apart-obad-part-1/]

Drozer

[https://www.mwrinfosecurity.com/products/drozer/]

Static Analysis techniques used for Android security Analyis

Covers methods commonly used when performing static analysis of an Android Application.

[http://www.cs.columbia.edu/~aho/cs6998/Lectures/14-12-01_Schmeelk_AndroidSecurity.pptx]

android-security-awesome

Multiple links to online analyzers, static analysis and dynamic analysis tools related to Android Malware application detection.

[https://github.com/ashishb/android-security-awesome]

AndroWarn

Androwarn is a tool whose main aim is to detect and warn the user about potential malicious behaviours developped by an Android application.

[https://github.com/maaaaz/androwarn]

APK Inspector

[https://github.com/honeynet/apkinspector/]

Malware Analysis Tools

[https://quequero.org/downloads/malware-analysis-tools/]

Cukoo - android malware analysis plugin

Definitely check out Cukoo (https://github.com/cuckoosandbox/cuckoo) that provies a dynamic sandboxing framework for malware analysis.

This plugins seems to integrate android for malware analysis.

[https://github.com/idanr1986/cuckoo-droid]

SciKit Learn

Machine learning and data mining framework in python.

[http://scikit-learn.org/stable/]