Assessing the Capability of Android Dynamic Analysis Tools to Combat Anti-Runtime Analysis Techniques

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Suo, Dewen, Xue, Lei, Huang, Weihao, Tan, Runze, Sun, Guozi
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866909960424652800
author Suo, Dewen
Xue, Lei
Huang, Weihao
Tan, Runze
Sun, Guozi
author_facet Suo, Dewen
Xue, Lei
Huang, Weihao
Tan, Runze
Sun, Guozi
contents As the dominant mobile operating system, Android continues to attract a substantial influx of new applications each year. However, this growth is accompanied by increased attention from malicious actors, resulting in a significant rise in security threats to the Android ecosystem. Among these threats, the adoption of Anti-Runtime Analysis (ARA) techniques by malicious applications poses a serious challenge, as it hinders security professionals from effectively analyzing malicious behaviors using dynamic analysis tools. ARA technologies are designed to prevent the dynamic examination of applications, thus complicating efforts to ensure platform security. This paper presents a comprehensive empirical study that assesses the ability of widely-used Android dynamic analysis tools to bypass various ARA techniques. Our findings reveal a critical gap in the effectiveness of existing dynamic analysis tools to counter ARA mechanisms, highlighting an urgent need for more robust solutions. This work provides valuable insights into the limitations of existing tools and highlights the need for improved methods to counteract ARA technologies, thus advancing the field of software security and dynamic analysis.
format Preprint
id arxiv_https___arxiv_org_abs_2512_12551
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Assessing the Capability of Android Dynamic Analysis Tools to Combat Anti-Runtime Analysis Techniques
Suo, Dewen
Xue, Lei
Huang, Weihao
Tan, Runze
Sun, Guozi
Software Engineering
As the dominant mobile operating system, Android continues to attract a substantial influx of new applications each year. However, this growth is accompanied by increased attention from malicious actors, resulting in a significant rise in security threats to the Android ecosystem. Among these threats, the adoption of Anti-Runtime Analysis (ARA) techniques by malicious applications poses a serious challenge, as it hinders security professionals from effectively analyzing malicious behaviors using dynamic analysis tools. ARA technologies are designed to prevent the dynamic examination of applications, thus complicating efforts to ensure platform security. This paper presents a comprehensive empirical study that assesses the ability of widely-used Android dynamic analysis tools to bypass various ARA techniques. Our findings reveal a critical gap in the effectiveness of existing dynamic analysis tools to counter ARA mechanisms, highlighting an urgent need for more robust solutions. This work provides valuable insights into the limitations of existing tools and highlights the need for improved methods to counteract ARA technologies, thus advancing the field of software security and dynamic analysis.
title Assessing the Capability of Android Dynamic Analysis Tools to Combat Anti-Runtime Analysis Techniques
topic Software Engineering
url https://arxiv.org/abs/2512.12551