Detecting Android Emulators for Mobile Games (모바일 게임용 안드로이드 에뮬레이터 탐지 기법)

Kim namsu (김남수); Seong-ho Kim (김성호); Minsu Park (박민수); SEONG JE CHO (조성제)

doi:10.29056/jsav.2021.06.06

Detecting Android Emulators for Mobile Games

Journal of Software Forensics
Abbr : JSAV
2021, 17(1), pp.41~50
DOI : 10.29056/jsav.2021.06.06
Publisher : Korea Software Assessment and Valuation Society
Research Area : Engineering > Computer Science
Received : June 4, 2021
Accepted : June 20, 2021
Published : June 30, 2021

Kim namsu ¹, Seong-ho Kim ¹, Minsu Park ¹, SEONG JE CHO ¹

¹단국대학교

Accredited

ABSTRACT

Many game and financial apps have emulator detection functionality to defend against dynamic reverse engineering attacks. However, existing Android emulator detection methods have limitations in detecting the latest mobile game emulators that are similar to actual devices. Therefore, in this paper, we propose a method to effectively detect Android emulators for mobile games based on Houdini module and strings of a library. The proposed method detects the two emulators, Nox and LD Player through specific strings included in libc.so of bionic, and an analysis of the system call execution process and memory mapping associated with the Houdini module.

KEYWORDS

mobile game, Android, emulator detection, Houdini module

Citation status

* References for papers published after 2024 are currently being built.

[web] / AVD User guide / android developer / https://developer.android.com/studio/run/managing-avds

[confproc] Jyoti Gajrani / 2015 / A robust dynamic analysis system preventing SandBox detection by Android malware / Proceedings of the 8th International Conference on Security of Information and Networks

[web] / Combating Potentially Harmful Applications with Machine Learning at Google: Datasets and Models / Android Developers Blog / https://android-developers.googleblog.com/2018/11/combating-potentially-harmful.html

[journal] 남우환 / 2019 / Android Emulators Forensic Analysis Technique / 디지털포렌식연구 / 한국디지털포렌식학회 13(4) : 303~316

[journal] 윤종성 / 2015 / A Study on android emulator detection for mobile game security / 정보보호학회논문지 / 한국정보보호학회 25(5) : 1067~1075

[web] / Mobile Game cheats :Game Bot News / gamebots.run / https://gamebots.run/news/Use-Summoners-War-Auto-Farm-Bot-on-PC-1794

[web] / “Evil mobile emulator farms”used to steal millions from US and EU banks / arstchnica / https://arstechnica.com/information-technology/2020/12/evil-mobile-emulator-farms-used-to-steal-millions-from-us-and-eu-banks/

[book] Ye Roger / Android System Programming:Porting, customizing, and debugging Android HAL / Packt Publishing

[web] / Houdini module / github / https://github.com/Rprop/libhoudini

[confproc] Thanasis Petsas / 2014 / Rage against the virtual machine: Hindering dynamic analysis of android malware / Proceedings of the Seventh European Workshop on System Security : 5:1~5:6

[book] Onur Sahin / 2018 / Research in Attacks, Intrusions, and Defenses : 3~24

[web] / 2016 / Nox App Player Download for Windows PC, Mac, Laptop / Nox App Player Download / http://noxappplayer.com/

[web] / A highly-customizable free emulator / LDPlayer / https://ld-player.en.softonic.com/

[web] / android-x86 download / android-x86 / https://www.android-x86.org/

[confproc] Qifan Yang / 2019 / Mobile Gaming on Personal Computers with Direct Android Emulation / Proceedings of The 25th Annual International Conference on Mobile Computing and Networking : 1~15

[journal] Hwa-Young Jeong / 2016 / x86-Android performance improvement for x86 smart mobile devices / Concurrency and Computation: Practice and Experience / Wiley 28(10) : 2770~2780

[confproc] Timothy Vidas / 2014 / Evading android runtime analysis via sandbox detection / Proceedings of the 9th ACM symposium on Information, computer and communications security : 1~6

[confproc] Jie Lin / 2019 / Out-of-Domain Characteristic Based Hierarchical Emulator Detection for Mobile / Proceedings of the 2nd International Conference on Information Technologies and Electrical Engineering : 1~5

[journal] Daehee Jang / 2019 / Rethinking anti-emulation techniques for large-scale software deployment / Computers & Security / Elsevier BV 83 : 182~200

[confproc] Yiming Jing / 2014 / Morpheus: automatically generating heuristics to detect android emulators / Proceedings of the 30th Annual Computer Security Applications Conference : 216~225

[web] / AWS Device Farm device list / Amazon Web Services / https://awsdevicefarm.info/

[confproc] Sora Lee / 2015 / Android Emulator Detection for Evading Dynamic Analysis / Proceedings of the Korean Information Science Society Conference : 846~848

[confproc] Namsu Kim / 2020 / Detecting Android Emulators based on API calls: Overview and Research Trends / Proceedings of the Spring Annual Conference of Korea Institute of Next Generation Computing

This paper was written with support from the National Research Foundation of Korea.

KJCKorea
Journal Central

Journal of Software Forensics 2024 KCI Impact Factor : 0.32

Detecting Android Emulators for Mobile Games

ABSTRACT

KEYWORDS

Citation status

* References for papers published after 2024 are currently being built.

Journal of Software Forensics 2024 KCI Impact Factor : 0.32

Detecting Android Emulators for Mobile Games

ABSTRACT

KEYWORDS

Statistics

Tools

Issue List

Citation status

KCI Citation Counts (1)

REFERENCES (23) * References for papers published after 2024 are currently being built.

Search PDF

Citation

* References for papers published after 2024 are currently being built.