Project Name: APK Flow Analyzer

Team Name: SafeSurfers

Presentation Video Link: https://youtu.be/zR7-G5U7d_s

Introduction

Android devices have become more widespread lately. A recent study highlights that more and more security issues concerning data privacy in preinstalled system apps have emerged. Many preinstalled apps send critical information to third-party domains without the user's knowledge. In this project, we will investigate whether these security risks are present on Android smartphones sold in Singapore. The results will reveal whether Singapore-sold Android smartphones are vulnerable to such security threats and whether immediate actions such as upgrading security defenses or raising awareness among locals are required.

In this project, we will go over the tools and features used to retrieve data for analysis. In addition, we will discuss the data-driven findings and possible reasons for the given outcomes.

Interested in particular on data related to

• Device-related persistent identifiers (e.g., IMEI, IMSI, etc.)
• Geolocation data such as GPS coordinates and network-related identifiers
• User profile information, like phone number and app usage patterns
• Social relationships details, for instance, call history
• Document any instances where data is transmitted without user consent or notification.

Tools Used

• MobSF (Mobile Security Framework)
• Androwarn
• Mobexler
• JADX (Dex to Java Decompiler)

Application used

• Chrome
• Google Drive
• Google Maps
• Photos
• YouTube
• YouTube Music

Google Drive Link: https://drive.google.com/drive/folders/15S0p6yt7tz_O925t3G15QUQAliXs_cd7?usp=drive_link

Types of analysis done