Section: New Software and Platforms

Platforms

Kharon platform

The Kharon platform is under development in the LHS of Rennes and should be ready to use in the beginning of 2018. This experimental platform aims to analyze Android malware using a set of software developed by the CIDRE team. Software that are involved are:

• The Blare IDS http://www.blare-ids.org/, and in particular the AndroBlare version, for tracking information flows of malware;

• The GroddDroid software http://kharon.gforge.inria.fr/grodddroid.html, for manipulating the malware statically and dynamically;

• The GPFinder software http://kharon.gforge.inria.fr/gpfinder.html, for computing paths in the malware's control flow;

• The kharon software that handles the orchestration of a bunch of malware, the server and a set of smartphones.

The Kharon platform will be used for analysing malware as soon as they appear in the wild. The analysis results will be stored for further experiments and statistics.