Mobile security: we will first review the iOS and Android security models. Then we will study
Android malware and gray-ware, that is, those that leak user privacy. We will also discuss
the attack ecosystem including rooting attacks and third-party app stores. A project can
involve implementing an Android malware clustering algorithm that atomically classifies
Android malware and gray-ware.
“Wow, you really are an Android expert!” Your boss is delighted with your last project, it seems. However, you aren’t sure whether or not completing 1 assignment warrants the title of ‘expert’.
“Just in time, too, because we have another client with some Android work lined up! They just found this method to root their Android device and they want you to write a report on the entire process.”
Maybe you should’ve tried to persuade your boss that you aren’t such an expert after all.
Once again, you go back to you desk and open up the client document
.
Assignment
The purpose of this assignment is to explore how you can leverage the OTA mechanism to root an Android device and get an idea of how rooted Android can be used to do bad things. Note that this lab is more focused on exploration rather than implementation, so the more details you can bring up in your report, the more beneficial it will be.
There are 4 tasks that you will need to complete for this lab. They include:
- Building an OTA package (20%), which involves
- Writing an update script, and
- Building the package
- Injecting code via app_process (20%), which involves
- Injecting some dummy code,
- Compiling the code, and
- Building the package
- Implementing SimpleSU to get root (20% for implementation + 10% for questions), which involves
- Exploring code that will replace app_process in order to launch a root shell, and finally
- Launching the root attack
- Answering task questions
- Implementing malicious location app (20%), which involves
- Implementing check for superuser access
- Granting location access permission
- Report (10%)
There are 2 tasks get bonus points, which includes:
- Implementing app removal malicious app (5%)
- Rooting the Android VM with a new approach (5%)
There are 4 files that should be downloaded to get started. This includes:
- A Development VMLinks to an external site.
- Mirror VMLinks to an external site.
- Ubuntu 16.04
- Creds: seed/dees
- Installation Guide
-
- Note: you may also have to change the Graphics Controller to VBoxVGA in the Display Settings in order to have a GUI
- The fully fleshed-out code for Task 3Download The fully fleshed-out code for Task 3
- Skeleton code for Task 4Download Skeleton code for Task 4
Supplementary Material:
Lab 3_Supplementary_Material.pdf
Project FAQ:
Project 3 FAQ.xlsxLinks to an external site.
Deliverables
Format:
– Report.pdf
– Lab03.zip
– *.apk
– Task4
– Bonus
– README (optional)
Deliverables:
Your submission should include two files. First, you need to submit a detailed lab report to describe what you have done and what you have observed, including screenshots and code snippets (if needed)for Task 1-4 and Bonus. You also need to provide explanation to the observations that are interesting or surprising. You are encouraged to pursue further investigation, beyond what is required by the lab description. Second, you also need to submit the zip file for your source code for Task 4 and Bonus. The zip file should include the .apk file for your applications andanother zip file containing the source code for the entire Task 4 and Bonus part and a README (if needed).
