Modifying Android for security analysis

Details

Supervisors

Legay, Axel

Faculty

Ecole polytechnique de Louvain

Degree label

Master [120] en sciences informatiques, à finalité spécialisée

Abstract

During security analysis of an application, we often have to disable various security controls. For example, we have to make sure that the application accepts our Man-in-the-Middle TLS certificate, and we have to make sure it doesn't detect the rooted nature of the device. The goal of this thesis is to implement a solution to modify the Android operating system in order to implement features that will help during mobile device security analysis. During the thesis, we will discuss the problem in-depth, discuss the current existing state of the art solutions and the reasons why they are currently limited for security assessments, and finally introduce a tool that was developed during the thesis to overcome the limitations of the current solutions.