Détection de flux de contrôle illégaux dans les Smartphones

Security in embedded systems such as smartphones requires protection of private data manipulated by third-party applications. Many mechanisms use dynamic taint analysis techniques for tracking information flow in software. But these techniques cannot detect control flows that use conditionals to implicitly transfer information from objects to other objects. In particular, malicious applications can bypass Android system and get privacy sensitive information through control flows. We propose an enhancement of dynamic taint analysis that propagates taint along control dependencies by using the static analysis in embedded system such as Google Android operating system. Our approach allows the detection of control flow attacks on smartphones. MOTS-CLÉS : Smartphones, Contrôle de flux, Tainting, Analyse statique, Analyse dynamique