Detection of android malware by static analysis on permissions and sensitive functions

This paper proposes a detection system for malicious apps in the Android mobile phones. The proposed system mainly extracts permissions and sensitive functions applied by an app, plus two additional features native-permissions and intent-priority, to conduct static analysis. Besides, the system also uses a sandbox, i.e., an emulator, to record and analyze the app's behavior. For the latter, this study aims to modify the short message (SM) sending function of the emulator, so that the SM content and receiver can be recorded when the function is performed.