The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jan. 30, 2024

Filed:

Jan. 28, 2021
Applicant:

Foundation of Soongsil University-industry Cooperation, Seoul, KR;

Inventors:

Jeong Hyun Yi, Seoul, KR;

Yong Gu Shin, Seoul, KR;

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/56 (2013.01); G06F 8/41 (2018.01); G06F 21/54 (2013.01); G06F 21/57 (2013.01);
U.S. Cl.
CPC ...
G06F 21/566 (2013.01); G06F 8/427 (2013.01); G06F 21/54 (2013.01); G06F 21/562 (2013.01); G06F 2221/033 (2013.01);
Abstract

A process wrapping method for bypassing native code anti-analysis includes receiving an execution instruction intended to run in an application from an Android framework when the application starts, extracting metadata of string and method from a compiled OAT file using an oatdump tool in the Android framework, determining if anti-analysis techniques are applied by comparing with information of a database (DB) based on the transmitted execution instruction and the extracted metadata, modifying the execution instruction based on the determined information when the anti-analysis technique is applied, and sending the modified execution instruction back to the Android framework. Accordingly, it is possible to provide an environment in which malicious applications to which anti-analysis techniques are applied can be easily analyzed.


Find Patent Forward Citations

Loading…