MIME: A Formal Approach to (Android) Emulation Malware Analysis

In this paper, we propose a new dynamic and configurableapproach to anti-emulation malware analysis, aiming at improving transparencyof existing analyses techniques. We test the effectiveness of existingwidespread free analyzers and we observe that the main problem ofthese analyses is that they provide static and immutable values to theparameter used in anti-emulation tests. Our approach aims at overcomingthese limitations by providing an abstract non-interference-based approachmodeling the fact that parameters can be modified dynamically,and the corresponding executions compared.