# Malware Analysis in IoT & Android Systems with Defensive Mechanism
## 4 Android System Architecture and Attacks
\begin{table}
\begin{tabular}{c c c c c} \hline \hline
**Classification of** & **Type of** & **Vulnerabilities** & **Strategy and Effect** & **Security** \\
**Attack** & **Attacks** & **Exploited by Attack** & **of Attack** & **Measure** \\ \hline \multirow{6}{*}{**Vulnerabilities**} & Rowhammerattack & DRAM & Memory leakage. & GuardION \\ \cline{2-5}  & Drammer attack & DRAM chip & Gain root access & GuardION \\ \cline{2-5}  & Glitch attack & DDR3 and DDR4 & Use graphics code to exploit & GuardION \\ \cline{2-5}  & QuadRooter Attacks & Linux IPC & Root Access & Patch with Distributer \\ \cline{2-5}  & RAMpage attack & RAM component & Gain access to sensitive & \\  & & memory location. Leak & GuardION \\  & & Information. & \\ \hline \multirow{6}{*}{**Vulnerabilities**} & DroidKungFu & Root privilege of adb and & Privilege escalation, unlock all & Security enhanced \\  & (Root Privilege) & udev & system files and functions. & \\ \cline{2-5}  & ROP (Code reuse) & The executable code & Overwriting of the return & Instruction set \\  & present in the library & address, point to arbitrary & randomization \\ \cline{2-5}  & Gooligan & Kernel API & Inappropriate validation, Root & \\  & (Root Privilege) & put\_user/get\_user & access, privilege escalation & NA \\ \cline{2-5}  & SOP (Code reuse) & Format String & Overwrite GOT entry, stack & \\  & & function pointer & \\ \cline{2-5}  & JOP (Code reuse) & Vulnerable jump & Overwriting stack, setjmp & \\  & instruction & pointer, function pointer & \\ \cline{2-5}  & Return to user attack & The shared address & Overwrite kernel pointer, & \\  & (Code reuse) & between user and kernel & redirect execution flow. & kGuard \\ \cline{2-5}  & TOCTOU (Zero Day) & The user and Driver & Gaining device driver control, & \\  & & haveder access to the & corrupt memory, privilege & NA \\  & & buffer & escalation & \\ \cline{2-5}  & Kernel Space Mirroring & & & \\ \cline{2-5}  & Attack (Permission & Read/Write data access to & \\  & Exploitation) & & EL (0) user mode & Accessing kernel & NA \\ \cline{2-5}  & & Root Loader Attack (DoS) & Non-verifiable address & Flood of traffic & BOOTSTOMP \\ \hline \multirow{6}{*}{**Vulnerabilities**} & Invisible man attack & \multirow{2}{*}{Security weakness} & Launch Phishing attack & Download applications from \\  & (sensor-based attack) & & & \\ \cline{2-5}  & Brute force attack & Weak passwords and & \multirow{2}{*}{Guessing of right key pair.} & Strong encryption algorithm. \\  & (Encryption system) & Authentication system. & & Two-factor Authentication. \\ \cline{2-5}  & Key reinstallation attacks & Allow reconnection using the same key. & & \\ \cline{2-5}  & Audio channel attacks & A security weakness in & \multirow{2}{*}{Reset the encryption key.} & \multirow{2}{*}{New Patch} \\  & (media-based attacks) & Android accessibility & & \\ \cline{2-5}  & (Consorred channel attacks) & Exploit IPC and & Retrieve data from the & \\ \cline{2-5}  & (sensor-based attacks) & permission system. & sensor-Steal sensitive data. & Security policy enforcement. \\ \hline \multirow{6}{*}{**Vulnerabilities**} & Energy-Based Attack & Complex inter relationship & \multirow{2}{*}{Resource consumption.} & \multirow{2}{*}{Strong Permission} \\  & (DoS) & between network & & \\ \cline{2-5}  & Runtime information & & & \\ \cline{2-5}  & Gathering Attack & Default permission system & & \\ \cline{2-5}  & (permission exploit) & & & \\ \cline{2-5}  & Code Injection Attack & Third-party libraries & The attacker gains excess & \\ \cline{2-5}  & (Permission exploit) & & & \\ \cline{2-5}  & Ad Libraries attack & \multirow{2}{*}{Intra library collusion} & The attacker exploits & \\ \cline{2-5}  & (Permission exploit) & & additional permission. & \\ \cline{2-5}  & \(\text{Mam in the middle attack}\) & \multirow{2}{*}{Non-authentication} & The attacker pretends & TLS public key \\  & (Network Attack) & & legitimate host & Infrastructure. \\ \hline \multirow{6}{*}{**Vulnerabilities**} & Cloak and dagger attack & \multirow{2}{*}{Default permission system} & \multirow{2}{*}{Control over the user interface.} & \multirow{2}{*}{Strong Permission.} \\  & (Permission exploit) & & & \\ \cline{1-1} \cline{2-5}  & Dirty COW & Privilege Escalation & & \\ \cline{1-1} \cline{2-5}  & (Permission exploit) & Attacks & & \\ \hline \hline \end{tabular}
\end{table}