Hydra-Bite: Static Taint Immunity, Split, and Complot Based Information Capture Method for Android Device

Table 11

Test results of anti-killing performance.


Sample Origin	Test Case	Source (Permission/ Sensitive API)	Sink (Permission/ Sensitive API)	Android 6.0 Warning (T/F)	VirusTotal [21] (Warnings/ Detector)	Androguard [22] (Total Permissions/ Sensitive APIs)	FlowDroid [9] (Source/Sink)

Malicious Sample (Table 5)	Mal_1	5/■	3/■	T	33/58	■	■
	Mal_2	5/■	2/■	T	33/57	■	■
	Mal_3	5/■	3/■	T	33/55	■	■
	Mal_4	5/■	1/■	T	37/57	■	■
	Mal_5	6/■	2/■	T	49/62	■	■
	Mal_6	5/■	2/■	T	49/62	■	■
	Mal_7	3/■	2/■	T	45/62	■	■
	Mal_8	4/■	2/■	T	32/54	■	■
	Mal_9	5/■	2/■	T	32/57	■	■
	Mal_10	5/■	3/■	T	42/56	■	■

DroidBench Test Case [9]	Merge1	1/1	1/1	T	27/54	4/	/
	DirectLeak1	1/1	1/1	T	27/55	4/	, /
	ArrayAccess1	1/1	1/1	F	28/61	4/	, /
	Button3	1/1	1/1	T	9/57	5/	/
	ContentProvider1	1/1	1/1	T	25/55	4/	, /,
	FieldSensitivity1	1/1	1/1	F	23/54	4/	, /
	Loop1	1/1	1/1	T	33/59	4/	, /
	ImplicitFlow1	1/1	0	F	12/57	2/	/
	ActivityLifecycle2	1/1	1/1	T	32/62	4/	, /
	Reflection1	1/1	1/1	T	28/55	4/	, /
	Echoer	1/1	1/1	T	17/62	3/	/
	IntentSink2	1/1	1/1	T	30/61	2/	, /,
	EventOrdering1	1/1	1/1	F	28/59	6/	, /
	Executor1	1/1	1/1	T	21/58	4/	/
	JavaThread2	1/1	1/1	F	22/60	4/	, /
	AsyncTask1	1/1	1/1	T	18/55	3/	, /

Non-Cooperative Transfer Case without Taint Cleaned (Table 10)	Capture1	1/1	1/1	F	14/59	2/	/
	Capture2	1/1	1/1	F	21/60	2/	/
	Capture3	1/1	1/1	F	17/56	2/	/

Non-Cooperative Transfer Case (Table 10)	SoundClean	1/1	1/1	F	10/62	4/	/
	LogClean	1/1	1/1	F	11/61	6/	/
	ScreenClean	1/1	1/1	F	13/62	5/	/

Co_Apps without Taint Cleaned (Table 10)	NSound_R	1/1	1/1	F	2/62	3/	/
	Sound_S	1/1	1/1	F	5/60	2/	/
	NLog_R	1/1	1/1	F	2/59	4/	/
	Log_S	1/1	1/1	F	3/62	2/	/
	NScreen_R	1/1	1/1	F	3/63	4/	/
	Screen_S	1/1	1/1	F	6/57	2/	/

Co_Apps with Taint Cleaned (Table 10)	CSound_R	1/1	1/1	F	2/62	3/	/
	Sound_S	1/1	1/1	F	5/60	2/	/
	CLog_R	1/1	1/1	F	2/59	4/	/
	Log_S	1/1	1/1	F	3/62	2/	/
	CScreen_R	1/1	1/1	F	3/63	4/	/
	Screen_S	1/1	1/1	F	6/57	2/	/

Wireless Communications and Mobile Computing

Hydra-Bite: Static Taint Immunity, Split, and Complot Based Information Capture Method for Android Device

Table 11