スマートフォンのセキュリティ
Contents
1. 19 TEL 15 02 au one E Es 5 x tr EAUEB XBEPEU EXSHBEIENREL HAEE S BS HERE COMDSEH BEIC LC LV REB UU EIL VKRDEI BUE tA RES AD 1 2 tf lt tt ENS USM EUCRIETSBDELET het ARONMERMALTELERE mS HARUAR 2221 58 Bo Tr FORME AET I 2LYC UIBFETEEID E TETE HS HSM FOMMISMTS 7L 4 IR UF ME AE MENUA QUE UNBEEBDOELVEOAZLZY me i ri eei vs ne tius HE UE BAT Bsp 5 t ul a lt nummo m ELLE MNLONILIERSLEMAPH ALONE PU EM m oXU EAEBLTZEChIEBSDCHEEIROBITTSIBEN m EU AMI tT MER RIRE LTL OLE m HE Xm ruL E m R AMAR S GIVEN GENE m EUR AMI DOLNENTESC EX da XUu r LcoHmiamL c EBenTALAX 0fe6eesemolt EX BAT Bsp 5 t ea ul G Q HRAN m m E 1 Hitt LOMME TTISENRLIETN DM EO IDmsCmECSELfCBVIREEIRMHE le ECHO ITA XOOUMPE LOS il TmBETESEWN DnormboxtAj TLT HT A TEBuDOBOET D DEL HT U CAHOUMPDERNEIL 01 U I RIELTHBRE OUR Wic2LYC SH CIR UNBPEEBLVU2. KDDi KDDIR amp D LABS MARN ZEILE gt Ein i H Z 5 W HEDA ARER EZ 2008 2009 pompe Web WebKit h 9 gt J 7 HE ut do HI g A L Andrei telnstd TX O 2008 11 ooog Iret root G1 IP tslnet Cia 2008 11 AW
3. APPLICATIONS Phone APPLICATION FRAMEWOR m mai LIBRARIES Media Framework FreeType saL 6 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS w e gt ww d 1 Ot Android MOS Be a OK a un Lo E ELET EENT D i Ren 25 ien JE gt 2 GPS FIX HE ID
4. O1 MN 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS B Market KDDI Market Android Market Oa ta E www google com Android 9 9 1
5. Android 1 0 2 0 Windows Internet Explorer EIE E GO M leg a 05 28 EET CAnorolo MMO BRO ATV REN IMD NIH z Hd oogle s HTA gt X Google Mie Laa A ai gio w ACN e HotMail ie 28 B Android X 2 D J mr Q aqiamrIie android EIE gt j com XXX XXX ver 1 0 3 A 9 Ver IAF E4 103501 1 6 2 6 29 per 2010 07 15 2 4 ides 1 FT LE D IJ x EU r Ai nm a Y PTT Ke ET wr 7 3 EM Tx ve ke Le dede D OLI f 2 LL EI LLL MEE E LI RS 6 1 KDDI PO3 PPP 14FO EH UERR TestPO1
6. A D 4 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS 0S 1 API DE 1 2 Android OS Jailbreak root 3 PC SD T ND s amp su km ulla TR TR amp REIRE 33 API Zt A HT E Fri c 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS Android VOS B H Windows TVMXP
7. o 9 2 9 3 Google 9 4
8. prenne 20 D2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS E d 1 2 21 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS Market root NW a KRETAO NRE fs HE Eu m P s y rm ri Mec PRE Te UE Ti ag m s 1 gt T B Li T OE hem T 7 Le 2 m I Dp dm m FIL mm Fl D LI n j root B OS gt KDDI
9. TC H FA TE 1 zEI HH qu t CE j x Linux LO CVE2009 2692 Linux 1 0 n gt A d ro id TM L I vu f Dar 2 2009 08 roots Rio CVE2009 2692 root asroot Linx 2009 09 Web FTP Web FTP Port _ FTP Tun HA fE A L 2009 10 Market Markest PC Android Market 4 ID E O MUT assetID userlD device ID authToken SMS Dalvik
10. C ANEH An Android G
11. 2 3 Android E KDDI 1 Market 2 OS 3 P D 16 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS au one Market B au one Market Android Market Android KDDI KDDI gt au one Market
12. Fer d gai qc City Bank Texas UKEO 399 eu oos Valley Credit Union wken as KC RER S WN ie Bank T DEL 10 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS B NE RTE EL LETA T2 AB AI 10 30 an Results B 31 INTERNET DELETE_PACKAGES RESTART_PACKAGES READ PHONE_STATE RECEIVE_SMS Scanning Installed apps m READ CONTACTS WRITE CONTACTS CALL PHONE cod do d US EE Ao READ SMS WRITE SMS SEND SMS GET TASKS Zu MN 6696 RECEIVE BOOT COMPLETED INSTALL PACKAGES Au TT 186 app s scanned 0 virus es ACCESS NETWORK STATE WRITE APN SETTINGS A found PROCESS OUTGOING CALLS INSTALL SHORTCUT
13. as xS A s Of PT B zr 9 AndroidrMOS mt 7 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS B Android MarketrV 646 BL ER Android 646 TERE DOR 98 152 ACCESS FINELOCATION 8 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS Android Market M gm vy E Android Market E QF ZU 2011451 B i TES 20 Twitter ess eH 27
14. SES x 243500l amp 39ttE zl rej T4 on WEE Sa PP Core Google Vm pe Vy 2009 05 Andeid MET JUSIIDR Android SDK ud SDKI Android Market Android SDKZ o Ct Android Market 8 Vandingapkt ed NS J C L X 4 2008 05 Market SetupWizard apk gtalkservice apk Talkapk Vending spkA fs SDK yj INVIA d y 4 th L O Linux ARlM Ue n 2009 08 Linx Androld purace
15. 0S initrc KD D A E tta I TA YT y n 0S OS au re menu 2008 11 SERHAW t ZA N NIS URL 1Gmai I er zd t 9 Ej 2 in Y 2009 01 From Replyto 2009 02 Web Web Packetyideeo QpenCore
16. to control the phone E Twitter Geinimi is effectively being grafted onto repackaged versions of legitimate applications orimarily games and distributed in third party Chinese Android app markets The affected e ee applications request extensive permissions over and above the set that is requested by their pa legitimate original versions Though the intent of this Trojan isn t entirely clear the 9 o possibilities for intent range from a malicious ad network to an attempt to create an Android botnet Follow us amp lookout Lookout has already delivered an update for its Android users to protect them against known instances of the Trojan If you are already a Lookout user free or premium you are imi Archives eO S protected and no action is needed x January 2011 d 13 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS SA rootft Dis EE N IPhone W Jailpreak htp www fLsecure comweblog archives 00001814 html root ssh Jailbreak ssSh ID PWD root E AndroidTM root iPhone M Jailbreak
17. Ld Ulo 2009 12 ERW 10S5 HT 03A 0S 0S root OS AE NA IS03 pg IS03 p KDDI
18. 12 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS E AndroidTM Geinimi http blog mylookout com 201 0 12 geinimi trojan e LO O KO ui FEATURES ABOUT BLOG SUPPORT PARTNER WITH US Sign Up Log In THE LOOKOUT BLOG DECEMBER 29 2010 B About this blog Security Alert Geinimi Sophisticated New TE Og OT LOOKOLIL a Android Trojan Found in Wild mobile security company in San By tim 34 Comments Francisco Find out more about us or our The Threat product d L y A new Trojan affecting Android devices has recently emerged in China Dubbed Geinimi based on its first known incarnation this Trojan can compromise a significant amount of EB subscribe personal data on a user s phone and send it to remote servers The most sophisticated Stay up to date with Android malware we ve seen to date Geinimi is also the first Android malware in the wild e hat displays botnet like capabilities Once the malware is installed on a user s phone it has 3r MT ribe to BOTNETO 4 275 Pi ons the potential to receive commands from a remote server that allow the owner of that server M tt
19. MOD 22 O2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS B OS PC OS X O PC B OS PC B OS B Market 9 Market 23 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS
20. gt E Google WeatherBug Elite vi Android MarketTWM BEES gt Google Gmail Androdz F oO 2 732 262 805 gt Google mm gt 9 gt and Games in the Market 10 3 c o 2 G 2 o x Ll o 2 E c L 3 E 3 o o x http p androlib com appstats aspx 9 D2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS 6 Droid09 a ehhh M HP http journal mycom co jp news 2010 01 14 019 Index html E android permission READ_INPUT_STATE Es
21. SMS Dalvik API SMS SMS Dalvik API CVE2009 2999 Android Dalvik E HT O3A SMS 2009 10 Android HAW ROM CVE2009 2682 ot HT Q3A y1 5 SD root Recovery Utility root ROM 2009 10 Recovery Mode HT 3A 1 5 IEME SIMH 1SlM WiFi Bluetooth RY RARE PME Bluetooth VA SG ARE EL TT ULL T gt BST 2009 11 aG lt iptables WiFi 99 us F Pen 9 PN
22. 8 apk ID TEST NEWS MENU P03 VS se ss iml 1 9 9 etn TR EEE RUE Y i Nc wat 2 CD 2 FU 4 5 https 60 32 84 62 android Q fa R v P03 RUE 0 5 Q FAPT Space KDD 17 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS E au one MarketrM au one MarketT M KDDI Android TV KDDI Android M
23. DMBaET d WAANT SAECAIFERIAMNONAITAR cEtf b AXE AA LE D EE NT AE O2 CARE L EMS CE SEUIL LIT CDR ALUMAQET MESE ATEN LUN UNE SATARA itak T 2011 KDDI R amp D Laboratories Inc IS01 CO Q C O SHDSL S
24. O UO U MODE 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS E 1 2 3 PC OS BH 1 2 Market 3 PC PC PC lt lt B iPhone 0S Android 2 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS 1 2 Android VWOS Andro
25. SE LOCATION ACCESS FINE LOCATION ASE CGPS com sonyericsson android resources ACCESS_LOCATION_EXTRA_COMMANDS Google7 92 h manager phone too android com ACCESS MOCK LOCATION NU com google andridapps maps ACCESS_COARSE_LOCATION WORT 32 EDORA KA Er ae re rl ACCESS COARSE UPDATES CALL PRIVILEGED ER e MODIFY PHONE STATE GOOGLE AUTH mail DEAN VABEORIAD E WAKE LOCK WRITE EXTERNAL STORAGE JU on ORE SROA USE CREDENTIALS VIBRATE bids dd OK til B 5a mzIDMED ID IMSI 11 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS B READ PHONE_STATE 9 B Android ID IMEI IMSI AdMob has been acquired by Google Learn more B
26. id Market 3 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS Bl AndroidTMOS 1 gt 2 Android MarketTM gt Android MarketrWM 3 Android M PC gt PC PC B AndroidTMOS 1 gt 2 Windows PC gt 3 gt root
27. ssh root root 1 OS Linux 2 Dalvik AndroidTM E root root Google x root Jailbreak 14 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS 1 O1 cc N 2011 KDDI R amp D Laboratories Inc KDDI R amp D LABS B KDDI 1 Market
Download Pdf Manuals
Related Search