Primjena obrnutog inženjeringa u svrhu analize sigurnosti Android aplikacija

master's thesis

• Title (english): Application of Reverse Engineering for Security Analysis of Android Applications
• Author: Barbara Ilić
• Mentor: Siniša Husnjak (mentor)
• Committee member: Dragan Peraković (predsjednik povjerenstva)
• Committee member: Ivan Cvitić (član povjerenstva)
• Committee member: Ivan Grgurević (član povjerenstva)
• Granter: University of Zagreb; Faculty of Transport and Traffic Sciences; (Division of Transport); (Department of Information and Communications Traffic); Zagreb
• Defense date and country: 2020-09-24, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Traffic and Transport Technology; Postal and Telecommunications Traffic

Abstract

Eksponencijalni rast i razvoj tehnologije te informatizacija i digitalizacija društva pridonijeli su porastu broja aktivnih korisnika mobilnih terminalnih uređaja, čime su mobilne aplikacije postale epicentar trenutnih razvojnih trendova. Cilj ovog diplomskog rada jest prikazati analizu sigurnosti Android aplikacija korištenjem postupka obrnutog inženjeringa. Postupkom obrnutog inženjeringa omogućuje se otkrivanje načina rada pojedine Android aplikacije, s ciljem čitanja i razumijevanja programskog koda te pronalaska potencijalnih sigurnosnih propusta i osjetljivih podatka unutar koda. Rad se temelji na prikazu tehnika i različitih alata te njihovih specifikacija namijenjenih provođenju obrnutog inženjeringa, kao i prikazu analize sigurnosti Android aplikacija na temelju praktičnog primjera.

Abstract (english)

Exponential growth and development of technology and informatization and digitalization of society have contributed to the increase in the number of active users of mobile terminal devices, which has made mobile applications the epicenter of current development trends. The purpose of this paper is to present an analysis of the security of Android applications using the reverse engineering procedure. The reverse engineering procedure enables the detection of the mode of operation of an individual Android application, with the aim of reading and understanding the program code and finding potential security vulnerabilities and sensitive data within the code. The paper is based on the presentation of techniques and various tools and their specifications intended for the implementation of reverse engineering, as well as the presentation of security analysis of Android applications based on a practical example.

• Keywords: obrnuti inženjering; sigurnost; zaštita; Android OS; mobilne aplikacije
• Keywords (english): reverse engineering; security; protection; Android OS; mobile applications
• Language: croatian
• URN:NBN: urn:nbn:hr:119:143573
• Study programme: Title: Traffic and Transport; specializations in: Road Traffic and Transport, Railway Traffic and Transport, Water Traffic and Transport, Air Traffic and Transport, Postal Traffic, Information and Communication Traffic, Urban Traffic and Transport; Course: Road Traffic and Transport; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka prometa (magistar/magistra inženjer/inženjerka prometa)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2020-10-29 14:49:42