Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I am seeking a way to monitor communication between Android applications in order to detect their suspicious behaviour but I am not sure where to start the development process from.

As far I have found such tool like http://www.comdroid.org/ but its functionality in not what I am looking for. I would like to have app on my mobile that could inform e.g. that app A communicates with apps: B, C and D. I am guessing that kernel programming might be involved.

I would appreciate any hints, directions, literature etc.

share|improve this question
1  
Keep in mind that Tor-based browsers like Orweb are likely to get round any detection you use. –  Polynomial Oct 31 '12 at 8:37

2 Answers 2

up vote 3 down vote accepted

TaintDroid is a modification of android to provide realtime privacy monitoring.

ProxyDroid forces all communication though a proxy such that it can be intercepted.

share|improve this answer

I would suggest you

  1. Create a Hotspot on your Laptop
  2. Install WireShark on your Laptop
  3. Run Wireshark on the your network interface that the HotSpot is on
  4. Disable GSM Services on your phone
  5. Enable WIFI on your phone and connect to your Hotspot (from step 1)
  6. Watch the Traffic flow from your Phone

What I think you will find is ....

Most data is being sent via a SSL connection, making it very difficult to determine what is being sent.

However you should be able to work out which ports are being used - by some reverse DNS tracing.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.