Collin Mulliner (Researcher, Systems Security Lab, Northeastern University)

PRESENTATION TITLE: Android DDI: Dynamic Dalvik Instrumentation of Android Applications and Framework

PRESENTATION ABSTRACT:

As application security becomes more important on Android we need better tools to analyze and understand them. Android applications are written in Java and a run in the Dalvik VM. Until now most analysis is done via disassembling and monitored execution in an emulator.

This talk presents a new technique to instrument Android applications executed in the DVM. The talk will introduce the new technique in great detail including many small examples and a whole attack based on it. We will go step by step to show you what can be achieved using this technique.

ABOUT COLLIN MULLINER

Collin Mulliner is a researcher in the Systems Security Lab at Northeastern University. Collin’s main interest is the security and privacy of mobile and embedded devices with an emphasis on mobile and smart phones. Since 1997 Collin has developed software and did security work for Palm OS, J2ME, Linux, Symbian OS, Windows Mobile, Android, and the iPhone. In 2006 he p0wnd Windows Mobile using MMS and broke iOS, Android, and Windows Mobile with SMS in 2009. Collin’s specifically interested in the areas of vulnerability analysis and offensive security.