
Aurasium
#Access Control#Specialized Security
DroidBox is a tool for dynamic analysis of Android applications, providing insights into package behavior and security.
Practical Security Policy Enforcement for Android Apps
Practical security policy enforcement for Android applications is achieved through bytecode rewriting and an in-place reference monitor. Aurasium's code is available under the GPLv3 license.
Code Structure:
- ApkMonitor/: Contains the main native and Java policy logic, along with a demo application.
- pyAPKRewriter/: Includes the scripts for patching APK files.
- dependencies/: Holds the dependencies required by pyAPKRewriter.
- SecurityManager/: Contains the ASM for the Aurasium Dependency.
To install the necessary Android SDK, use the following command: apt-get install unzip python python-pyasn1.
Usage:
To repackage an APK file, run: pyAPKRewriter/attach.sh source.apk [destination.apk].
To build a new version of Aurasium for repackaging, first compile ApkMonitor/ using Eclipse.
Then create an updated Aurasium
Then, create an updated Aurasium blob by using ApkMonitor/package. Finally, copy the aurasium.zip file to the dependencies/ directory.