forked from honeynet/droidbot
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathDroidboxEvaluator.py
359 lines (320 loc) · 12.3 KB
/
DroidboxEvaluator.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
# Evaluate DroidBot with DroidBox
# basic idea is:
# A tool is better if more DroidBox logs are generated
__author__ = 'yuanchun'
import argparse
import os
import logging
import sys
import threading
import time
from datetime import datetime
from droidbox_scripts.droidbox import DroidBox
from droidbot.droidbot import DroidBot
class DroidboxEvaluator(object):
"""
evaluate test tool with DroidBox
make sure you have started droidbox emulator before evaluating
"""
MODE_DEFAULT = "1.default"
MODE_MONKEY = "2.monkey"
MODE_RANDOM = "3.random"
MODE_STATIC = "4.static"
MODE_DYNAMIC = "5.dynamic"
def __init__(self, device_serial, apk_path, event_duration, event_count, event_interval, output_dir):
self.logger = logging.getLogger(self.__class__.__name__)
self.device_serial = device_serial,
self.apk_path = os.path.abspath(apk_path)
if output_dir is None:
output_dir = "evaluation_reports/"
now = datetime.now()
self.report_title = now.strftime("Evaluation_Report_%Y-%m-%d_%H%M")
result_file_name = self.report_title + ".md"
self.result_file_path = os.path.abspath(os.path.join(output_dir, result_file_name))
self.event_duration = event_duration
if self.event_duration is None:
self.event_duration = 200
self.event_count = event_count
if self.event_count is None:
self.event_count = 200
self.event_interval = event_interval
if self.event_interval is None:
self.event_interval = 2
self.record_interval = self.event_duration / 20
if self.record_interval < 2:
self.record_interval = 2
self.droidbot = None
self.droidbox = None
self.result = {}
self.logger.info("Evaluator initialized")
self.logger.info("apk_path:%s\n"
"duration:%d\ncount:%d\ninteval:%d\nreport title:%s" %
(self.apk_path, self.event_duration,
self.event_count, self.event_interval, self.report_title))
self.enabled = True
def start_evaluate(self):
"""
start droidbox testing
:return:
"""
if not self.enabled:
return
self.evaluate_mode(DroidboxEvaluator.MODE_DEFAULT,
self.default_mode)
self.evaluate_mode(DroidboxEvaluator.MODE_MONKEY,
self.adb_monkey)
self.evaluate_mode(DroidboxEvaluator.MODE_RANDOM,
self.droidbot_random)
self.evaluate_mode(DroidboxEvaluator.MODE_STATIC,
self.droidbot_static)
self.evaluate_mode(DroidboxEvaluator.MODE_DYNAMIC,
self.droidbot_dynamic)
self.dump(sys.stdout)
if not self.enabled:
return
result_file = open(self.result_file_path, "w")
self.dump(result_file)
result_file.close()
def evaluate_mode(self, mode, target):
"""
evaluate a particular mode
:param mode: str of mode
:param target: the target function to run
:return:
"""
if not self.enabled:
return
self.logger.info("evaluating [%s] mode" % mode)
self.droidbot = None
self.droidbox = None
target_thread = threading.Thread(target=target)
target_thread.start()
self.wait_for_droidbox()
self.monitor_and_record(mode)
self.stop_modules()
self.logger.info("finished evaluating [%s] mode" % mode)
def stop_modules(self):
if self.droidbox is not None:
self.droidbox.stop()
if self.droidbot is not None:
self.droidbot.stop()
def wait_for_droidbox(self):
# wait until droidbox starts counting
while self.enabled and self.droidbox is None:
time.sleep(2)
while self.enabled and not self.droidbox.is_counting_logs:
time.sleep(2)
def monitor_and_record(self, mode):
if not self.enabled:
return
self.result[mode] = {}
t = 0
self.logger.info("start monitoring")
try:
while True:
log_counts = self.droidbox.get_counts()
self.result[mode][t] = log_counts
time.sleep(self.record_interval)
t += self.record_interval
if t > self.event_duration:
return
except KeyboardInterrupt:
self.stop()
self.logger.info("stop monitoring")
self.logger.debug(self.result)
def stop(self):
self.enabled = False
def default_mode(self):
"""
just start droidbox and do nothing
:return:
"""
if not self.enabled:
return
self.droidbox = DroidBox(output_dir=None) #Set output_dir=None -> no DroidBox Result Files are created
self.droidbox.set_apk(self.apk_path)
self.droidbox.start_blocked(self.event_duration)
def start_droidbot(self, env_policy, event_policy):
"""
start droidbot with given arguments
:param env_policy: policy to deploy environment
:param event_policy: policy to send events
:return:
"""
if not self.enabled:
return
self.logger.info("starting droidbot")
self.droidbot = DroidBot(device_serial=self.device_serial,
app_path=self.apk_path,
env_policy=env_policy,
policy_name=event_policy,
event_count=self.event_count,
timeout=self.event_duration,
event_interval=self.event_interval,
with_droidbox=True,
quiet=True)
self.droidbox = self.droidbot.droidbox
self.droidbot.start()
def adb_monkey(self):
"""
try droidbot "monkey" mode
:return:
"""
self.start_droidbot(env_policy="none", event_policy="monkey")
def droidbot_random(self):
"""
try droidbot "random" mode
:return:
"""
self.start_droidbot(env_policy="none", event_policy="random")
def droidbot_static(self):
"""
try droidbot "static" mode
:return:
"""
self.start_droidbot(env_policy="none", event_policy="static")
def droidbot_dynamic(self):
"""
try droidbot "dynamic" mode
:return:
"""
self.start_droidbot(env_policy="none", event_policy="dynamic")
def result_safe_get(self, mode_tag=None, time_tag=None, item_tag=None):
"""
get an item from result
"""
if mode_tag is None:
return self.result
if mode_tag in self.result.keys() and isinstance(self.result[mode_tag], dict):
result_mode = self.result[mode_tag]
if time_tag is None:
return result_mode
if time_tag in result_mode.keys() and isinstance(result_mode[time_tag], dict):
result_item = result_mode[time_tag]
if item_tag is None:
return result_item
if item_tag in result_item.keys():
return result_item[item_tag]
return None
def dump(self, out_file):
modes = self.result_safe_get()
if modes is None or not modes:
return
else:
modes = list(modes.keys())
modes.sort()
out_file.write("# %s\n\n" % self.report_title)
out_file.write("## About\n\n")
out_file.write("This report is generated automatically by %s "
"with options:\n\n"
"+ apk_path=%s\n"
"+ event_duration=%s\n"
"+ event_interval=%s\n"
"+ event_count=%s\n\n"
% (self.__class__.__name__, os.path.basename(self.apk_path),
self.event_duration, self.event_interval, self.event_count))
out_file.write("## Apk Info\n\n")
out_file.write("|Item|Value|\n")
out_file.write("|----|----|\n")
out_file.write("|Package Name|%s|\n" % self.droidbox.application.getPackage())
out_file.write("|Main Activity|%s|\n" % self.droidbox.application.getMainActivity())
out_file.write("|Hash (md5)|%s|\n" % self.droidbox.apk_hashes[0])
out_file.write("|Hash (sha1)|%s|\n" % self.droidbox.apk_hashes[1])
out_file.write("|Hash (sha256)|%s|\n\n" % self.droidbox.apk_hashes[2])
out_file.write("### Permissions\n\n")
for permission in self.droidbox.application.getPermissions():
out_file.write("+ %s\n" % permission)
out_file.write("\n## Data\n\n")
out_file.write("### Summary\n\n")
# gen head lines
th1 = "|\tcategory\t|"
th2 = "|----|"
for mode in modes:
th1 += "\t%s\t|" % mode
th2 += "----|"
th1 += "\n"
th2 += "\n"
out_file.write(th1)
out_file.write(th2)
# gen content
categories = self.result_safe_get(modes[0], 0)
if categories is None:
categories = []
else:
categories = list(categories.keys())
categories.sort()
for category in categories:
tl = "|\t%s\t|" % category
for mode in modes:
time_tags = self.result_safe_get(mode)
if time_tags is None:
tl += "\t0\t|"
continue
time_tag = max(time_tags.keys())
count = self.result_safe_get(mode, time_tag, category)
tl += "\t%d\t|" % count
tl += "\n"
out_file.write(tl)
out_file.write("\n### Tendency\n\n")
# gen head lines
th1 = "|\ttime\t|"
th2 = "|----|"
for mode in modes:
th1 += "\t%s\t|" % mode
th2 += "----|"
th1 += "\n"
th2 += "\n"
out_file.write(th1)
out_file.write(th2)
# gen content
time_tags = self.result_safe_get(modes[0])
if time_tags is None:
time_tags = []
else:
time_tags = list(time_tags.keys())
time_tags.sort()
for time_tag in time_tags:
tl = "|\t%d\t|" % time_tag
for mode in modes:
tl += "\t%s\t|" % self.result_safe_get(mode, time_tag, "sum")
tl += "\n"
out_file.write(tl)
def parse_args():
"""
parse command line input
generate options including host name, port number
"""
description = "Run different testing bots on droidbox, and compare their log counts."
parser = argparse.ArgumentParser(description=description,
formatter_class=argparse.RawTextHelpFormatter)
parser.add_argument("-d", action="store", dest="device_serial",
help="serial number of target device")
parser.add_argument("-a", action="store", dest="apk_path", required=True,
help="file path of target app, necessary for static analysis")
parser.add_argument("-count", action="store", dest="event_count",
type=int, help="number of events to generate during testing")
parser.add_argument("-interval", action="store", dest="event_interval",
type=int, help="interval between two events (seconds)")
parser.add_argument("-duration", action="store", dest="event_duration",
type=int, help="duration of droidbot running (seconds)")
parser.add_argument("-o", action="store", dest="output_dir",
help="directory of output")
options = parser.parse_args()
# print options
return options
if __name__ == "__main__":
opts = parse_args()
logging.basicConfig(level=logging.INFO)
evaluator = DroidboxEvaluator(
device_serial=opts.device_serial,
apk_path=opts.apk_path,
event_duration=opts.event_duration,
event_count=opts.event_count,
event_interval=opts.event_interval,
output_dir=opts.output_dir,
)
try:
evaluator.start_evaluate()
except KeyboardInterrupt:
evaluator.stop()
evaluator.dump(sys.stdout)