Upload File

how mobile malware bypasses secure containers

34
How Mobile Malware Bypasses Secure Containers

Upload: lacoon-mobile-security

Post on 18-Nov-2014

1.436 views

Category:

Technology


1 download

Report

DESCRIPTION

How does mobile malware bypass secure containers, wrappers and MDM?

TRANSCRIPT

Page 1: How Mobile Malware Bypasses Secure Containers

How Mobile Malware Bypasses Secure Containers

Page 2: How Mobile Malware Bypasses Secure Containers

The Mobile Application Sandbox Security Model

Page 3: How Mobile Malware Bypasses Secure Containers

The Mobile Applicaton SandBox Security Model

Page 4: How Mobile Malware Bypasses Secure Containers

The Mobile Applicaton SandBox Security Model

Storage

Page 5: How Mobile Malware Bypasses Secure Containers

The Mobile Applicaton SandBox Security Model

Memory

Page 6: How Mobile Malware Bypasses Secure Containers

The Mobile Applicaton SandBox Security Model

Device Functionalities (GPS,Network, SMS)

Page 7: How Mobile Malware Bypasses Secure Containers

The Mobile Applicaton SandBox Security Model

Storage

Memory

Device Functionalities (GPS,Network, SMS)

Page 8: How Mobile Malware Bypasses Secure Containers

The Mobile Applicaton SandBox Security Model

Storage

Memory

Device Functionalities (GPS,Network, SMS)

Page 9: How Mobile Malware Bypasses Secure Containers

Secure Containers and Wrappers

Page 10: How Mobile Malware Bypasses Secure Containers

Secure Containers

Memory

Device Functionalities (GPS,Network, SMS)

Storage

Page 11: How Mobile Malware Bypasses Secure Containers

Secure Containers

Memory

Device Functionalities (GPS,Network, SMS)

Storage

Page 12: How Mobile Malware Bypasses Secure Containers

Wrappers

Memory

Device Functionalities (GPS,Network, SMS)

Storage

Page 13: How Mobile Malware Bypasses Secure Containers

How Mobile Malware Breaks Secure Containers

Page 14: How Mobile Malware Bypasses Secure Containers

Attack Overview

Memory

Device Functionalities (GPS,Network, SMS)

Storage

] [ ] [

Page 15: How Mobile Malware Bypasses Secure Containers

Attack Overview

Memory

Device Functionalities (GPS,Network, SMS)

Storage

] [ ] [

Page 16: How Mobile Malware Bypasses Secure Containers

Attack Overview

Memory

Device Functionalities (GPS,Network, SMS)

Storage

] [ ] [

Page 17: How Mobile Malware Bypasses Secure Containers

Attack Overview

Memory

Device Functionalities (GPS,Network, SMS)

Storage

] [ ] [

Page 18: How Mobile Malware Bypasses Secure Containers

Step-by-Step

Page 19: How Mobile Malware Bypasses Secure Containers

Step 1: Infection of the Device/ Android

Page 20: How Mobile Malware Bypasses Secure Containers

Step 1: Infecting the Device with Malware/ iOS

Page 21: How Mobile Malware Bypasses Secure Containers

Step 2: Installing a Backdoor Android/“Rooting”

Administrative Every process can run as an administrative (root)

user if it is able to trigger a vulnerability in the OS

Vulnerability Each Android device had/ has a vulnerability Exploit Detection mechanisms don’t look at apps that

exploit the vulnerability

] [ ] [

Page 22: How Mobile Malware Bypasses Secure Containers

Step 2: Installing a Backdoor Android/iOS/ “Jailbreaking”

Community

Jailbroken

xCon

] [ ] [

Page 23: How Mobile Malware Bypasses Secure Containers

Step 3: Bypassing Containerization

Memory

Device Functionalities (GPS,Network, SMS)

Storage

] [ ] [

Page 24: How Mobile Malware Bypasses Secure Containers

Step 3: Bypassing Containerization

Memory

Device Functionalities (GPS,Network, SMS)

Storage

] [ ] [

Page 25: How Mobile Malware Bypasses Secure Containers

There’s More... Android

Page 26: How Mobile Malware Bypasses Secure Containers

Alternative Keyboards

Page 27: How Mobile Malware Bypasses Secure Containers

Alternative Keyboards

HELLO WORLD

Page 28: How Mobile Malware Bypasses Secure Containers

Alternative Keyboards

HELLO WORLD

Page 29: How Mobile Malware Bypasses Secure Containers

Mitigating the Threat with Lacoon

Mobile Security

Page 30: How Mobile Malware Bypasses Secure Containers

Behavioral-Based Malware Detection

Virtual execution

Cloud-based virtual execution of applications and payloads to detect exploits

Page 31: How Mobile Malware Bypasses Secure Containers

Behavioral-Based Malware Detection

Virtual execution

Identification

Cloud-based virtual execution of applications and payloads to detect exploits

Identification of malicious behaviors within the applications (such as keyloggers and screencaptures)

Page 32: How Mobile Malware Bypasses Secure Containers

Behavioral-Based Malware Detection

Virtual execution

Identification

Detection

Cloud-based virtual execution of applications and payloads to detect exploits

Identification of malicious behaviors within the applications (such as keyloggers and screencaptures)

Detection and blocking of C&C activity when mobile malware attempts to exfiltrate information from the device

Page 33: How Mobile Malware Bypasses Secure Containers

Behavioral-Based Malware Detection

Virtual execution

Identification

Detection

Blocking of drive-by attacks

Cloud-based virtual execution of applications and payloads to detect exploits

Identification of malicious behaviors within the applications (such as keyloggers and screencaptures)

Detection and blocking of C&C activity when mobile malware attempts to exfiltrate information from the device

Blocking of drive-by attacks, including exploits of unpatched Web browser vulnerabilities and Jailbreaking attempts

Page 34: How Mobile Malware Bypasses Secure Containers

Thank You.

Contact us:

[email protected]


Construction of 2 Bypasses at Kelambakkam and Thiruporur …tnrdc.com/wp-content/uploads/2017/12/Bid_Document.pdf · 2017. 12. 6. · Construction of 2 Bypasses at Kelambakkam and

Economic Evaluation of Town Bypasses...Economic evaluation of town bypasses iv • It is estimated that the total value of highway generated trade originating from expenditures made

A96 Bypasses Study - HITRANS · HITRANS & Highlands & Islands Enterprise (HIE) Economic Appraisal of the Proposed A96 Bypasses Executive Summary Scott Wilson ES.3 May 2008 • Nairn:

Intrusion Detection and Malware Analysis - Malware collection134.2.173.140/lehre/ws10/ids-malware/12-malware-collection.pdf · Intrusion Detection and Malware Analysis Malware collection

Malware Slums: Measurement and Analysis of Malware on ...homepage.cs.uiowa.edu/~mshafiq/files/malware... · Malware Slums: Measurement and Analysis of Malware on Traffic Exchanges

Malware Nilgün Kablan. Malware …………………………………….…….……………………………………………… Geschichte der Malware ……………….…………………………………………………

Malware Analysis and Antivirus Technologies: Kernel Malware & A Look at Malware … · 2011-08-16 · Malware Analysis and Antivirus Technologies: Kernel Malware & A Look at Malware

Bypasses for a Billion: improving availability for all HASA 2013 Conference FINAL.pdf · Bypasses for a Billion: improving healthcare ... spend very low … % of GDP 17.9 9.7

DATASHEET - DLT Solutions€¦ · • Protects Docker host and containers with Anti-Malware scans and Intrusion Protection • Reduces management costs by automating repetitive and

6,385 Consecutive Mini-Gastric Bypasses: 15 Years Later

Reversing malware analysis trainingpart9 advanced malware analysis

A TCR-mimic antibody to WT1 bypasses tyrosine kinase inhibitor

How to Impress Girls with Browser Memory Protection Bypasses

THE EVOLUTION OF MALWARE & FUTURE MALWARE MITIGATION

Malware Analysis Analysis.pdf · Definisi Malware Analysis • What is a malware? • Malware (malicious software) ... Malware Sinkronisasi Token • Pelaku: Zeus Banking Trojan •

The Lord Mayor’s TransApex project is a system of bypasses ... · The Lord Mayor’s TransApex project is a system of bypasses – primarily tunnels – which will ... – Transcity

Malware Fails Best Bugs in Malware Felix Leder [Malware ... · 1 Malware Fails Best Bugs in Malware Felix Leder [Malware Detection Team] [email protected] 5. desember 2011 malware

Malware, Malware y más Malware ¿Cómo me puedo proteger? “Dijo el cliente web”

PAD: Pills, stents & bypasses. - CHRC Wheatcroft Presentation including ARS.pdf · PAD: Pills, stents & bypasses.! (Pick one and then keep walking)" Dr Mark Wheatcroft" Vascular Surgeon"

The Benefits of Photorespiratory Bypasses: How CanThe Benefits of Photorespiratory Bypasses: How Can They Work?1[OPEN] Chang-Peng Xin, Danny Tholen, Vincent Devloo, and Xin-Guang

Android Malware Exposed-Evolution of Android Malware

How to Impress Girls with Browser Memory Protection Bypasses · How to Impress Girls with Browser Memory Protection Bypasses Mark Dowd & Alexander Sotirov [email protected] [email protected]

MEMORANDUM1 Screening of Jackson and Five Corners' Bypasses › wp-content › uploads › ... · MEMORANDUM1 2 . 3 . Screening of Jackson and Five Corners' Bypasses . PREPARED FOR:

Managing Process Alarms & Bypasses

Factory Manager Bypasses Lockout/Tag-out and is · PDF fileFactory Manager Bypasses Lockout/Tag-out and ... equipment in which the unexpected energization or startup of the machines

Malware and anti-malware (fun with Trojans) - Z. …z.cliffe.schreuders.org/edu/FS/Malware and anti-malware... · 2014-04-02 · Malware and anti-malware (fun with Trojans) ... with

PrimPol bypasses UV photoproducts during eukaryotic ...sro.sussex.ac.uk/46833/1/J_Bianchi_PrimPol_bypasses_2013.pdf · PrimPol bypasses UV photoproducts during eukaryotic chromosomal

Tunnel-bypasses and minarets of capitalism: Amman as

Pump Bypasses

Google App Engine Java security sandbox bypasses

Abusing Access Tokens for UAC Bypasses James Forshaw ... · Reading your way around UAC Abusing Access Tokens for UAC Bypasses James Forshaw @tiraniddo

Introduction to Mobile Malware. Outline ➢ Introduction ➢ Types of Malware ➢ Malware examples ➢ How Malware Spreads ➢ Prevention ➢ AndroRAT Hands-on Lab

Improving accuracy of malware detection by …...FFRI, Inc. Background – malware and its detection 4 Increasing malware Targeted Attack (Unknown malware) Malware generators Obfuscators

Potential Effects of Highway Bypasses on Local Communities

Malware & Anti-Malware