Obfuscated Android Application Development

Pierre Graux (1) , Jean-François Lalande (1) , Valérie Viet Triem Tong (1)

1 CIDRE - Confidentialité, Intégrité, Disponibilité et Répartition

Obfuscation techniques help developers to hide their code when distributing an Android application. The used techniques are linked to the features provided by the programming language but also with the way the application is executed. Using obfuscation is now a common practice and specialized companies sell tools or services for automatizing the manipulation of the source code. In this paper, we present how to develop obfuscated applications and how obfuscation technique usage is evolving in the wild. First, using advanced obfuscation techniques requires some advanced knowledge about the development of Android applications. We describe how to build such applications for helping researchers to generate samples of obfuscated applications for their own research. Second, the use of obfuscation techniques is evolving for both regular applications or malicious ones. We aim at measuring the development of these usages by studying application and malware samples and the artifacts that indicate the use of obfuscation techniques.

Keywords: application; mobile; obfuscation

Domains: Cryptography and Security [cs.CR]

Pierre Graux, Jean-François Lalande, Valérie Viet Triem Tong. Obfuscated Android Application Development. CECC 2019 - Central European Cybersecurity Conference, Nov 2019, Munich, Germany. pp.1-6, ⟨10.1145/3360664.3361144⟩. ⟨hal-02305924⟩