DroidDissector is an extraction tool for both static and dynamic features. The aim is to provide Android malware researchers and analysts with an integrated tool that can extract all of the most widely used features in Android malware detection from one location. The static analysis module extracts features from both the manifest file and the source code of the application to obtain a broad array of features that include permissions, API call graphs and opcodes. The dynamic analysis module runs on the latest version of Android and analyses the complete behaviour of an application by tracking the system calls used, network traffic generated, API calls used and log files produced by the application.
翻译:DroidDissector是一款能够提取静态与动态特征的综合性工具。其目标是为安卓恶意软件研究人员和分析人员提供一个集成化工具,使其能够从单一平台提取安卓恶意软件检测中所有最广泛使用的特征。静态分析模块从应用的清单文件和源代码中提取特征,从而获取包括权限、API调用图和操作码在内的广泛特征集。动态分析模块运行于最新版本的安卓系统上,通过追踪应用使用的系统调用、生成的网络流量、使用的API调用以及应用产生的日志文件,对应用的完整行为进行分析。