Research Article
Hydra-Bite: Static Taint Immunity, Split, and Complot Based Information Capture Method for Android Device
Table 11
Test results of anti-killing performance.
| | Sample Origin | Test Case | Source
(Permission/
Sensitive API) | Sink
(Permission/
Sensitive API) | Android 6.0
Warning
(T/F) | VirusTotal [21] (Warnings/
Detector) | Androguard [22]
(Total Permissions/
Sensitive APIs) | FlowDroid [9]
(Source/Sink) |
| | Malicious Sample (Table 5) | Mal_1 | 5/■ | 3/■ | T | 33/58 | ■ | ■ | | Mal_2 | 5/■ | 2/■ | T | 33/57 | ■ | ■ | | Mal_3 | 5/■ | 3/■ | T | 33/55 | ■ | ■ | | Mal_4 | 5/■ | 1/■ | T | 37/57 | ■ | ■ | | Mal_5 | 6/■ | 2/■ | T | 49/62 | ■ | ■ | | Mal_6 | 5/■ | 2/■ | T | 49/62 | ■ | ■ | | Mal_7 | 3/■ | 2/■ | T | 45/62 | ■ | ■ | | Mal_8 | 4/■ | 2/■ | T | 32/54 | ■ | ■ | | Mal_9 | 5/■ | 2/■ | T | 32/57 | ■ | ■ | | Mal_10 | 5/■ | 3/■ | T | 42/56 | ■ | ■ |
| | DroidBench Test Case [9] | Merge1 | 1/1 | 1/1 | T | 27/54 | 4/ | / | | DirectLeak1 | 1/1 | 1/1 | T | 27/55 | 4/ | , / | | ArrayAccess1 | 1/1 | 1/1 | F | 28/61 | 4/ | , / | | Button3 | 1/1 | 1/1 | T | 9/57 | 5/ | / | | ContentProvider1 | 1/1 | 1/1 | T | 25/55 | 4/ | , /, | | FieldSensitivity1 | 1/1 | 1/1 | F | 23/54 | 4/ | , / | | Loop1 | 1/1 | 1/1 | T | 33/59 | 4/ | , / | | ImplicitFlow1 | 1/1 | 0 | F | 12/57 | 2/ | / | | ActivityLifecycle2 | 1/1 | 1/1 | T | 32/62 | 4/ | , / | | Reflection1 | 1/1 | 1/1 | T | 28/55 | 4/ | , / | | Echoer | 1/1 | 1/1 | T | 17/62 | 3/ | / | | IntentSink2 | 1/1 | 1/1 | T | 30/61 | 2/ | , /, | | EventOrdering1 | 1/1 | 1/1 | F | 28/59 | 6/ | , / | | Executor1 | 1/1 | 1/1 | T | 21/58 | 4/ | / | | JavaThread2 | 1/1 | 1/1 | F | 22/60 | 4/ | , / | | AsyncTask1 | 1/1 | 1/1 | T | 18/55 | 3/ | , / |
| | Non-Cooperative Transfer Case without Taint Cleaned (Table 10) | Capture1 | 1/1 | 1/1 | F | 14/59 | 2/ | / | | Capture2 | 1/1 | 1/1 | F | 21/60 | 2/ | / | | Capture3 | 1/1 | 1/1 | F | 17/56 | 2/ | / |
| | Non-Cooperative Transfer Case (Table 10) | SoundClean | 1/1 | 1/1 | F | 10/62 | 4/ | / | | LogClean | 1/1 | 1/1 | F | 11/61 | 6/ | / | | ScreenClean | 1/1 | 1/1 | F | 13/62 | 5/ | / |
| | Co_Apps without Taint Cleaned (Table 10) | NSound_R | 1/1 | 1/1 | F | 2/62 | 3/ | / | | Sound_S | 1/1 | 1/1 | F | 5/60 | 2/ | / | | NLog_R | 1/1 | 1/1 | F | 2/59 | 4/ | / | | Log_S | 1/1 | 1/1 | F | 3/62 | 2/ | / | | NScreen_R | 1/1 | 1/1 | F | 3/63 | 4/ | / | | Screen_S | 1/1 | 1/1 | F | 6/57 | 2/ | / |
| | Co_Apps with Taint Cleaned (Table 10) | CSound_R | 1/1 | 1/1 | F | 2/62 | 3/ | / | | Sound_S | 1/1 | 1/1 | F | 5/60 | 2/ | / | | CLog_R | 1/1 | 1/1 | F | 2/59 | 4/ | / | | Log_S | 1/1 | 1/1 | F | 3/62 | 2/ | / | | CScreen_R | 1/1 | 1/1 | F | 3/63 | 4/ | / | | Screen_S | 1/1 | 1/1 | F | 6/57 | 2/ | / |
|
|
