Towards Transparent and Stealthy Android OS Sandboxing via Customizable Container-Based Virtualization
Wenna Song, Jiang Ming, Lin Jie Jiang, Yi Xiang, Xuanchen Pan, Jianming Fu, Guojun Peng · 2021
A fast-growing demand from smartphone users is mobile virtualization.This technique supports running separate instances of virtual phone environments on the same device. In this way, users can run multiple copies of the same app simultaneously,and they can also run an untrusted app in an isolated virtual phone without causing damages to other apps. Traditional hypervisor-based virtualization is impractical to resource-constrained mobile devices.Recent app-level virtualization efforts suffer from the weak isolation mechanism. In contrast, container-based virtualization offers an isolated virtual environment with superior performance.However, existing Android containers do not meet the anti-evasion requirement for security applications: their designs are inherently incapable of providing transparency or stealthiness.