In mobile malware landscape there are many techniques to inject malicious payload in a
trusted application: one of the most common is represented by the so-called update attack …

Code obfuscation is a set of transformations that make code programs harder to understand.
The goal of code obfuscation is to make reverse engineering of programs infeasible, while …

This paper describes the design, analysis, and implementation of an efficient algorithm for
information flow analysis expressed using a type system. Given a program and an …

We propose an approach on model checking information flow for imperative language with
procedures. We characterize our model with pushdown system, which has a stack of …

Formal verification techniques are necessary to demonstrate the completeness, the
correctness, and the consistency in implementing spacecraft model-based autonomy …

Equivalence checking is traditionally applied to computer system design. It is a promising
formal technique for the improvement of software quality. However, it requires detailed …

AnserverBot✓ AnserverBot malicious behavior is embedded into the host app at installation
time, ie, the malicious payload is not downloaded from a remote location but it is stored in an …

Model checking is a very useful method to verify concurrent and distributed systems which is
traditionally applied to computer system design. We examine the applicability of model …

Nowadays Android is the most widespread operating system. This is the reason why
malware writers target it. Both researchers and commercial antimalware provide several …

We present a method based on abstract interpretation to check secure information flow in
programs with dynamic structures where input and output channels are associated with …