Abstract

Smartphones contain security-sensitive information of a user such as contacts, SMS, photos, and GPS
information. Because smartphones are always turned on and ready to connect to the Internet, that
sensitive information is in danger of leakage. Various kinds of malware are more and more attack-
ing smartphones, especially Android phones. We propose a scheme that protects Android phones
against one of them, called LeNa. LeNa infects rooted Android phones and periodically leaks sensi-
tive information of the phone. LeNa also dominates the system and makes the phone a zombie which
can perform Distributed Denial of Service (DDoS) attack. The proposed scheme checks whether a
process is allowed to execute a requesting operation even after the process have acquired the root
privilege. This scheme can also protect smartphones from malware targeted for rooted phones.