Designing an Efficient Method for Detecting Kernel Level Rootkits

Abstract

Mobile phones have become ubiquitous in our lives. The number of sensitive and private transactions involving sensitive and intimate data that take place on mobile phones are increasing day by day. Mobile phone market is dominated by Android Mobile OS with 72% market coverage globally. Some of the major challenges faced by Android security experts include hardening of emulated environment to mitigate code obfuscation techniques used by malware authors and handling of rootkits. In this paper, we study various methods of hardening the emulated environment. We will also look at rootkits which are one of the most dangerous Advanced Persistent Threats.