TagSense Android Spy Application By Microsoft Interns Chaun Qin and Xuan Bao: Technical Paper

Embed Size (px)

Citation preview

  • 8/6/2019 TagSense Android Spy Application By Microsoft Interns Chaun Qin and Xuan Bao: Technical Paper

    1/14

    Wkj^fa~f3 K ^dkuwymhaf$ek~fg Kyyuhknm whKvwhdkwln Ldkjf Wkjjlaj

    Nmvka [la ]vka Ekh Uhdlw Uh| Nmhvgmvu| ^ulmkul Afbkovglwl

    {lanIn~f!~n!fgv }vka!ekhIgvof!fgv uhdlw!unIgvof!fgv ~ulmkulIn~f!~n!fgv

    Valpfu~lw| h` ^hvwm Nkuhblak Gvof Valpfu~lw|Nhbvdelk" ^N" V^K Gvumkd" AN" V^K

    KE^WUKNW

    Dhelbf ymhaf~ kuf efnhdlaj wmf nhapfujfaw ybkw`hud `hu yfu$~hakb ~fa~laj" nhdyvwlaj" kag nhddvalnkwlha! Wml~ ykyfukwwfdyw~ wh f}ybhlw wml~ nhapfujfanf whzkug~ wmf yuhebfd h`kvwhdkwln ldkjf wkjjlaj! Zf fapl~lha Wkj^fa~f" k dhelbfymhaf ek~fg nhbbkehukwlpf ~|~wfd wmkw ~fa~f~ wmf yfhybf" kn$

    wlplw|" kag nhawf}w la k ylnwvuf" kag dfujf~ wmfd nkuf`vbb| whnufkwf wkj~ ha$wmf$st|! Wmf dkla nmkbbfajf yfuwkla~ wh gl~nuld$lakwlaj ymhaf v~fu~ wmkw kuf la wmf ylnwvuf `uhd wmh~f wmkw kufahw! Zf gfybh| k yuhwhw|yf h` Wkj^fa~f ha = Kaguhlg ymhaf~"kag gfdha~wukwf lw~ f``fnwlpfaf~~ wmuhvjm 599 ylnwvuf~" wkofala pkulhv~ ~hnlkb ~fwwlaj~! Zmlbf uf~fkunm la `knf ufnhjalwlhanhawlavf~ wh ldyuhpf ldkjf wkjjlaj" Wkj^fa~f l~ ka kwwfdywwh fdeuknf kgglwlhakb gldfa~lha~ h` ~fa~laj whzkug~ wml~ fagjhkb! Yfu`hudkanf nhdykul~ha zlwm Kyybf lYmhwh kag JhhjbfYlnk~k ~mhz~ wmkw ~vnm ka hvw$h`$ekag kyyuhknm l~ pkbvkebf"f~yfnlkbb| zlwm lanufk~laj gfplnf gfa~lw| kag jufkwfu ~hyml~$wlnkwlha la ~fa~laj(bfkualaj kbjhulwmd~!

    Nkwfjhulf~ kag ^vecfnw Gf~nulywhu~

    M!>!7 _La`hudkwlha ^whukjf kag UfwulfpkbT3 ^|~wfd~ kag^h`wzkuf? N!5!7 _Nhdyvwfu$Nhddvalnkwlha Afwzhuo~T3 Gl~$wulevwfg ^|~wfd~? M!6!6 _La`hudkwlha Lawfu`knf~ kag Yuf$~fawkwlha~T3 ^hvag kag Dv~ln Nhdyvwlaj

    Jfafukb Wfud~

    Gf~lja" F}yfuldfawkwlha" Yfu`hudkanf

    Of|zhug~

    Ldkjf Wkjjlaj" @knf Ufnhjalwlha" fa~laj" dkuwymhaf" Nhawf}w$kzkufaf~~" Knwlplw| Ufnhjalwlha

    Wml~ uf~fkunm zk~ nhagvnwfg zmlbf Nmvka [la zk~ pl~lwlaj~|~wfd~ kag afwzhuolaj uf~fkunm juhvy kw Gvof Valpfu~lw|!

    Yfudl~~lha wh dkof gljlwkb hu mkug nhylf~ h` kbb hu ykuw h` wml~ zhuo `huyfu~hakb hu nbk~~uhhd v~f l~ jukawfg zlwmhvw `ff yuhplgfg wmkw nhylf~ kufahw dkgf hu gl~wulevwfg `hu yuhw hu nhddfunlkb kgpkawkjf kag wmkw nhylf~efku wml~ ahwlnf kag wmf `vbb nlwkwlha ha wmf u~w ykjf! Wh nhy| hwmfuzl~f" whufyvebl~m" wh yh~w ha ~fupfu~ hu wh ufgl~wulevwf wh bl~w~" uf{vluf~ yulhu ~yfnlnyfudl~~lha kag(hu k `ff!

    Dhel^|~;;" Cvaf 5=Cvb| ;" 59;;" Efwmf~gk" Dku|bkag" V^K!Nhy|uljmw 59;; KND $907>$9(;;(90 !!!';9!99!

    ;! LAWUHGVNWLHAKvwhdkwln ldkjf wkjjlaj mk~ effa k bhaj ~wkaglaj yuhebfd!Zmlbf wmf fbg~ h` ldkjf yuhnf~~laj kag `knf ufnhjalwlha mkpfdkgf ~ljalnkaw yuhjuf~~" lw ufdkla~ gl`nvbw wh kvwhdkwlnkbb|bkefb k jlpfa ylnwvuf! Mhzfpfu" gljlwkb ylnwvuf~ kag plgfh~kuf vagfujhlaj ka f}ybh~lha" f~yfnlkbb| zlwm wmf yuhbl`fukwlha

    h` mljm {vkblw| gljlwkb nkdfuk~ fdefggfg la dhelbf gfplnf~!K~ wmf~f ylnwvuf~ jfw ~whufg la hablaf nhawfaw zkufmhv~f~"wmf affg wh ~fkunm kag euhz~f wmfd l~ efnhdlaj nuvnlkb _;T!@vuwmfudhuf" wmf juhzlaj ~hyml~wlnkwlha la wf}wvkb ~fkunm l~ukl~laj wmf f}yfnwkwlha~ `uhd ldkjf ufwulfpkb v~fu~ kuf f}$yfnwlaj wh ~fkunm `hu ylnwvuf~ k~ wmf| gh `hu wf}wvkb nhawfaw!F``huw~ wh fajkjf mvdka~ `hu bkefblaj ylnwvuf~ -zlwm nuhzg$~hvunlaj hu hablaf jkdlaj _56T, dk| ef k ~why$jky ~hbvwlha"evw l~ ahw blofb| wh ~nkbf la wmf bhajfu uva! Wmf phbvdf h` nha$wfaw l~ juhzlaj kw gukdkwln ~yffg~" kag lw~ gfyfagfanf ha kyklu h` mvdka f|f~ l~ blofb| wh efnhdf wmf ehwwbfafno!

    Wml~ ykyfu eufko~ kzk| `uhd f~wkebl~mfg kyyuhknmf~ wh ld$kjf wkjjlaj" kag f}ybhuf~ ka kbwfuakwlpf kunmlwfnwvuf uhhwfgla dvbwl$gldfa~lhakb" hvw$h`$ekag ~fa~laj! Wmf nhuf lgfk l~

    ~ldybf! Nha~lgfu k ~nfakulh la zmlnm Ehe l~ wkolaj k ylnwvufh` ml~ `ulfag~! Ehe~ ymhaf f~wkebl~mf~ k ~mhuw$blpfg zlufbf~~nhaafnwlha zlwm kbb ml~ `ulfag~ ymhaf~" kag la~wuvnw~ wmfdwh knwlpkwf wmflu ~fa~hu~ `hu k ~mhuw wldf$zlaghz kuhvag wmfymhwh$nblno! Wmf ~fa~hu~ ~fa~f wmf dhdfaw" ~vddkulsf wmfdfk~vufg gkwk" kag nhddvalnkwf wmfd ekno wh Ehe~ ymhaf!Ehe~ ymhaf yuhnf~~f~ wml~ gkwk wh lgfawl`| zmlnm h` wmf lagl$plgvkb~ kuf la wmf ylnwvuf" wmflu knwlplwlf~" kag hwmfu nhawf}$wvkb wkj~ kehvw wmf hnnk~lha! Wmf~f wkj~ kuf ~|~wfdkwlnkbb|hujkalsfg lawh k zmfa$zmfuf$zmh$zmkw `hudkw" vbwldkwfb|nufkwlaj ka kvwhdkwln gf~nulywlha `hu wmf ylnwvuf!

    L` ghaf zfbb" kvwhdkwln ldkjf wkjjlaj nka fakebf k pkulfw|h` kyyblnkwlha~! Haf dk| ldkjlaf ldyuhpfg ldkjf ~fkunm lawmf Lawfuafw" hu fpfa zlwmla haf~ hza nhdyvwfu Ehe dk|{vfu| ml~ yfu~hakb ymhwh nhbbfnwlha `hu kbb ylnwvuf~ h` Kblnfkag Fpf ybk|laj whjfwmfu la wmf ~ahz! Kahwmfu kyyblnkwlhadk| wkj plgfh~ zlwm ldyhuwkaw fpfaw(knwlplw| dkuofu~? k v~fuh` wml~ kyyblnkwlha dk| ef kebf wh dhpf wmf plgfh ~blgfu wh wmff}knw wldf$yhlaw zmfuf Yuf~lgfaw Hekdk knwvkbb| zkbo~ vy whwmf yhglvd" hu ~wkuw~ ~yfkolaj! Whgk|" ~vnm `vanwlhakblwlf~dk| ef kpklbkebf la ~fbfnw ldkjf~ kag plgfh~" zmfuf ~hdfmvdka~ mkpf ykla~wkolajb| wkjjfg wmfd _5T! Wkj^fa~f kld~wh kvwhdkwf wml~ yuhnf~~ plk ~fa~hu$k~~l~wfg wkjjlaj!

  • 8/6/2019 TagSense Android Spy Application By Microsoft Interns Chaun Qin and Xuan Bao: Technical Paper

    2/14

    K akwvukb {vf~wlha l~ zm| ~mhvbg ~fa~hu$k~~l~wfg wkjjlaj ef ka|fk~lfu hu efwwfu wmka ldkjf yuhnf~~laj(`knf ufnhjalwlha8 Zf ef$blfpf wml~ dk| ef wuvf efnkv~f wmf gl``fufaw ~fa~hu~ kuf blofb|wh nkywvuf wmf dhdfaw~ knuh~~ dvbwlybf ~fa~laj gldfa~lha~!Bkvjmlaj dk| ef dhuf akwvukbb| gfwfnwkebf plk wmf dlnuh$ymhaf? gkanlaj dk| f}mlelw ka knnfbfuhdfwfu ~ljakwvuf? bljmw~fa~hu~ dk| fk~lb| gl~nfua efwzffa laghhu kag hvwghhu fa$pluhadfaw~ _0=T! @vuwmfu" yfhybf la wmf ylnwvuf dk| mkpfwmf glufnwlha h` wmflu ~dkuwymhaf~ nhdyk~~ hyyh~lwf wh wmkw

    h` wmf nkdfuk~ nhdyk~~? wmh~f wmkw yh~f `hu wmf ylnwvuf dk|f}mlelw k dhwlha ~ljakwvuf wmuhvjm wmflu knnfbfuhdfwfu~! Ufn$hjalslaj kbb wmf~f kwwulevwf~ wmuhvjm ldkjf yuhnf~~laj kbhafdk| ef gl`nvbw! Wmf glpfu~lw| h``fufg e| dvbwlybf ~fa~lajgldfa~lha~ dk| kbbhz Wkj^fa~f wh nk~w k zlgfu afw wmfnmkanf~ h` nkywvulaj wmf laglplgvkb~(knwlha~" hpfu kw bfk~w hafh` wmf~f gldfa~lha~" l~ blofb| wh ef mljmfu!

    H` nhvu~f" lw l~ afnf~~ku| wh nbkul`| wmf ahwlha h` wkj~ mfuf!Zf gh ahw } wmf dfkalaj h` wkj~ wh ef wmh~f wmkw nka hab|ef hewklafg pl~vkbb|" e| bhholaj kw ka ldkjf hu k plgfh! La$~wfkg" zf gfaf wmfd wh ef of|zhug~ wmkw gf~nulef wmf ha$jhlaj ~nfakulh(fpfaw(hnnk~lha gvulaj zmlnm wmf ylnwvuf zk~wkofa! @hu la~wkanf" ahl~| nk`f dk| ef k pkblg wkj" fpfa

    wmhvjm ahwmlaj la wmf ylnwvuf pl~vkbb| ~vjjf~w~ wmkw wmf ybknfl~ ahl~|! ^ldlbkub|" Fpf dk| ahw ef `vbb| pl~lebf la k ylnwvuf ef$nkv~f ~mf l~ mlglaj efmlag Kblnf" |fw" wkjjlaj wmf ylnwvuf zlwmFpf l~ pkblg k~ yfu hvu lawfuyufwkwlha!

    Wuka~bkwlaj wmf hpfukbb pl~lha lawh k gfybh|kebf ~|~wfd fawklb~k avdefu h` nmkbbfajf~! -;, Wkj^fa~f affg~ wh lgfawl | wmflaglplgvkb~ la wmf ylnwvuf ~lanf Ehe~ ymhaf jkwmfu~ ~fa~fgla`hudkwlha `uhd kbb ymhaf~ zlwmla zlufbf~~ ukajf" lw l~ va$nbfku zmlnm h` wmf ymhaf~ zfuf la wmf ylnwvuf! -5, ^fa~huufkglaj~ jkwmfufg `uhd gl``fufaw ymhaf~ affg wh ef dlafg whlgfawl`| knwlplwlf~ kag nhawf}wvkb la`hudkwlha! ->, Wmf fafuj|evgjfw `hu ~fa~laj" nhddvalnkwlaj" kag nhdyvwlaj affg~ whef hywldlsfg wh `knlblwkwf zlgf$~nkbf kghywlha!

    Wmf jhkb h` wml~ ykyfu l~ wh kgguf~~ wmf~f nmkbbfajf~" kagnha~hblgkwf wmfd lawh ka f}wfa~lebf ~|~wfd `ukdfzhuo -zlwmyuhpl~lha~ wh ybvj$la ldkjf yuhnf~~laj kag nuhzg$~hvunlajdhgvbf~,! Zf `hnv~ yuldkulb| ha wmf u~w yuhebfd lgfawl$`|laj wmf yfhybf wmkw kuf la wmf ylnwvuf kag gukz ha dvbwl$gldfa~lhakb ~fa~laj wh kgguf~~ lw! @hu la~wkanf" zf ag wmkwzmfa yfhybf yh~f `hu k ylnwvuf" wmflu ~wlbbaf~~ gvulaj wmf yh~fyuf~faw~ k val{vf ~ljakwvuf ha wmf knnfbfuhdfwfu! Zf kb~hhe~fupf k ufbkwlha~mly efwzffa wmf nkdfuk~ nhdyk~~ glufn$wlha kag wmf nhdyk~~ glufnwlha~ h` wmf ~vecfnw~! @lakbb|" `huylnwvuf~ zlwm dhplaj ~vecfnw~" zf ag wmkw lw l~ yh~~lebf whla`fu wmflu dhwlha wmuhvjm k ~f{vfanf h` nkdfuk ~aky~mhw~kag nhuufbkwf wmfd kjkla~w knnfbfuhdfwfu(nhdyk~~ dfk~vuf$dfaw~! Mkuaf~~laj wmf~f hyyhuwvalwlf~" zmlbf nhylaj zlwmyuknwlnkb nmkbbfajf~ blof pkulkebf ymhaf hulfawkwlha" hud~ wmfnuv} h` Wkj^fa~f! Whzkug~ k nhdybfwf ~|~wfd" zf kb~h jfafu$kwf knwlplw|(nhawf}wvkb wkj~ e| gukzlaj ha f~wkebl~mfg knwlplw|ufnhjalwlha kag knhv~wln ~ljakb yuhnf~~laj kbjhulwmd~!

    Hvu dkla nhawulevwlha~ la wml~ ykyfu dk| ef ~vddkulsfg k~3

    Fapl~lhalaj ka kbwfuakwlpf" hvw$h`$ekag hyyhuwvalw|whzkug~ kvwhdkwln ldkjf wkjjlaj! Zf efblfpf wmkwwml~ hyyhuwvalw| zlbb ef nkwkb|sfg e| wmf juhzlaj yuhbl`$fukwlha h` nkdfuk$f{vlyyfg ~dkuwymhaf~" kag nhanvu$ufaw kgpkanf~ la yfu~hakb ~fa~laj!

    Gf~ljalaj Wkj^fa~f" ka kunmlwfnwvuf `hu nhhuglakw$laj wmf dhelbf ymhaf ~fa~hu~" kag yuhnf~~laj wmf~fa~fg la`hudkwlha wh wkj ldkjf~! Wmf glpfu~lw| ladvbwl$gldfa~lhakb ~fa~laj mfby~ hpfunhdf yuhebfd~ wmkwkuf hwmfuzl~f gl`nvbw ha k ~lajbf gldfa~lha!

    Ldybfdfawlaj kag fpkbvkwlaj Wkj^fa~f ha KaguhlgAf}v~Haf ymhaf~! Nhdykufg wh `knf ufnhjalwlha nkyk$elblwlf~ la Kyybf lYmhwh kag Jhhjbf Ylnk~k" Wkj^fa~f f}$

    mlelw~ k `klub| jhhg yufnl~lha" kag k ~ljalnkawb| mljmfuufnkbb! Dhufhpfu" knwlplw| wkj~ zlwm Wkj^fa~f kuf `kudhuf ufbfpkaw wmka Jhhjbf Jhjjbf~ _

  • 8/6/2019 TagSense Android Spy Application By Microsoft Interns Chaun Qin and Xuan Bao: Technical Paper

    3/14

    @ljvuf ;3 Wmuff f}kdybf ylnwvuf~! Wkj^fa~f wkj~ fknm ylnwvuf zlwm wmf wldf" bhnkwlha" laglplgvkb$akdf" kag ek~ln knwlplw|!@knf ufnhjalwlha e| lYmhwh kag Ylnk~k nka wkj yfhybf la wmf bf`w ylnwvuf" bf~~ ~h la wmf dlggbf" kag ahw ~h la wmf uljmwylnwvuf! Ka kuelwuku| mvdka -fdvbkwlaj nuhzg$~hvunlaj, l~ kebf wh bkefb zlwm ~fdkawlnkbb| ulnm wkj~" mhzfpfu nkaahwakdf laglplgvkb~! Jhhjbf Jhjjbf~" ufb|laj ha ldkjf yuhnf~~laj" h``fu~ yhhu wkj~!

    Ylnwvuf ;3 dka| yfhybf" ~dlblaj" ~wkaglajYlnwvuf 53 haf yfu~ha" ~wkaglaj" ~ahzlajYlnwvuf >3 wzh jv|~" ybk|laj" ylaj yhaj

    Zf he~fupfg wmkw mvdka k~~ljafg wkj~ zfuf ahw k ~wulnw ~vyfu$~fw h` Wkj^fa~f! La `knw" wmf| zfuf ~hdfzmkw nhdybfdfawku|la wfud~ h` ~fdkawln ulnmaf~~! Zmlbf mvdka~ fk~lb| ufnhj$alsfg wmf ~fdkawln~ h` k ylnwvuf" ~vnm k~ ~dlblaj" fbfn$wuhaln ~fa~laj f}wuknwfg bhz$bfpfb kwwulevwf~ ~vnm k~ akdf~ h`yfhybf" ~ldybf knwlha~" bhnkwlha" kdelfanf" fwn! Fpfa wmhvjmwmf~f ~fa~fg kwwulevwf~ dk| hab| kgg vy wh k ~dkbb wkj phnke$vbku| whgk|" ufnfaw uf~fkunm mk~ dkgf ~ljalnkaw kgpkanf~la faulnmlaj wml~ phnkevbku|! Knwlplw| ufnhjalwlha _;9T" kdel$fanf ~fa~laj _:T" mvdka efmkplhu bfkualaj _;;T" kag bhnkwlha~fa~hu~ _;5T kuf eflaj knwlpfb| dlafg" uf~vbwlaj la wmf f}wukn$wlha h` ulnm nhawf}wvkb la`hudkwlha! Wkj^fa~f lgfawlf~ wml~gfpfbhylaj hyyhuwvalw| kag yuhyh~f~ wh mkuaf~~ lw wmuhvjm k

    euhkg kunmlwfnwvukb ukdfzhuo! Zf la~wkawlkwf wmf ukdfzhuozlwm ka kvwhdkwln ldkjf wkjjlaj kyyblnkwlha!

    ^nhyf h` Wkj^fa~f

    Wkj^fa~f l~ k u~w ~wfy kag nfuwklab| ahw k nhdybfwf ~hbvwlha`hu ldkjf wkjjlaj! Ldkjf~ h` hecfnw~ -f!j!" eln|nbf~" `vualwvuf"yklawlaj~," h` kaldkb~" hu h` yfhybf zlwmhvw ymhaf~" nkaahwef ufnhjalsfg! Yvw gl``fufawb|" Wkj^fa~f uf{vluf~ wmf nha$wfaw la wmf ylnwvuf~ wh mkpf ka fbfnwuhaln `hhwyulaw wmkw nkaef nkywvufg hpfu kw bfk~w haf h` wmf ~fa~laj gldfa~lha~! L`wmf hecfnw~ gh ahw yuf~faw wml~ `hhwyulaw" haf mk~ wh ufb| hawmf pl~vkb ghdkla kbhaf! Kujvkeb|" haf dk| fapl~lha U@LG~ha eln|nbf~" `vualwvuf" yklawlaj~" kag fpfa yfw kaldkb~ la wmf`vwvuf! L` `vwvuf nkdfuk~ nhdf f{vlyyfg zlwm U@LG ufkgfu~"Wkj^fa~f zlbb lddfglkwfb| ef kebf wh wkj fknm ylnwvuf ek~fgha wmf hecfnw~ la lw! Mhzfpfu" zlwmhvw U@LG ufkgfu~ ha whgk|~ymhaf~" Wkj^fa~f akuuhz~ ghza wmf `hnv~ wh lgfawl`|laj wmflaglplgvkb~ la k ylnwvuf" kag wmflu ek~ln knwlplwlf~!

    Ek~l~ `hu Nhdykul~ha

    Lw l~ akwvukb wh nhawuk~w wmf yfu~ha$lgfawlnkwlha nkykelblwlf~h` Wkj^fa~f kjkla~w `knf ufnhjalwlha kbjhulwmd~! Zmlbf zfzlbb lagffg nhdykuf zlwm lYmhwh kag Ylnk~k -ehwm h` zmlnmkbbhz `knf wkjjlaj plk ~hdf mvdka$k~~l~wkanf," zf he~fupfwmkw wmf pl~vkb kag ~fa~hu$ek~fg kyyuhknmf~ nka ef nhdybf$

    dfawku|! @knf ufnhjalwlha dk| zhuo zfbb vagfu jhhg bljmwlajnhaglwlha~" zmfa k yfu~ha~ `knf l~ nbfkub| pl~lebf? Wkj^fa~fdk| ef k~ jhhg fpfa vagfu ekg bljmwlaj nhaglwlha~! @hu la$

    ~wkanf" vablof Wkj^fa~f" ehwm lYmhwh kag Ylnk~k glg ahw ufn$hjalsf wmf yfhybf la wmf dlggbf kag uljmw ylnwvuf~ la @lj$vuf ;! Wkj^fa~f ghf~ ahw gfyfag ha wmf ym|~lnkb `fkwvuf~h` k yfu~ha~ `knf -zmfwmfu mf l~ zfkulaj k gkuo jbk~~" hu~yhuwlaj k afz efkug," zmfufk~ `knf$ufnhjalwlha kyyblf~ zfbbwh olg~ zmh gh ahw nkuu| ymhaf~! @lakbb|" `knf ufnhjalwlha`kb~fb| gfwfnwfg `knf~ la k zkbb$yklawlaj" kag jhw nha`v~fg ef$wzffa wzla~ la k ylnwvuf? Wkj^fa~f kphlgfg ehwm wmf~f ylw$`kbb~! La ~vddku|" k mvugbf wh pl~vkb ufnhjalwlha dk| ahw mla$gfu ufnhjalwlha ha hwmfu ~fa~laj gldfa~lha~" kag plnf pfu~k!Wmfuf`huf" zf efblfpf wmkw Wkj^fa~f la nhacvanwlha zlwm `knfufnhjalwlha kbjhulwmd~ nhvbg dkof yfhybf$lgfawlnkwlha fpfadhuf uhev~w!

    >! ^\^WFD HPFUPLFZ@ljvuf 5 ~mhz~ k mljm bfpfb hpfuplfz h` wmf Wkj^fa~f ~|~wfd!Zf nha~lgfu ka f}kdybf ~nfakulh zmfuf Ehe l~ wkolaj k yln$wvuf h` Kblnf kag Fpf" zmlbf Chma l~ la wmf plnlalw| -evw ahw lawmf ylnwvuf,! Zf gf~nulef wmf hyfukwlha~ ~wfy$e|$~wfy!

    Zmfa Wkj^fa~f l~ knwlpkwfg kw wmf efjlaalaj h` ka fpfaw -f!j!"ykuw|" glaafu" pknkwlha" ylnaln," wmf kyyblnkwlha yuhdyw~ wmfv~fu `hu k ~f~~lha yk~~zhug! Yfhybf ykuwlnlykwlaj la wmkw fpfaw"kag zlbblaj wh uva Wkj^fa~f" gfnlgf ha k nhddha yk~~zhugkag fawfu lw la wmflu uf~yfnwlpf ymhaf~! Wml~ yk~~zhug knw~k~ k ~mkufg ~f~~lha of|" fa~vulaj wmkw ~fa~fg la`hudkwlha l~k~~ldlbkwfg hab| `uhd juhvy dfdefu~! Wmv~" zmfa Ehe wkof~k ylnwvuf h` Kblnf la k nuhzgfg ybknf" wmf ylnwvuf ghf~ ahw jfw

    wkjjfg zlwm akdf~ h` kbb hwmfu yfhybf la wmf nuhzg! Yulpkn|ufdkla~ yuf~fupfg!

    Hanf Ehe l~ ufkg| wh wkof wmf ylnwvuf" mf knwlpkwf~ wmf nkd$fuk ha wmf ymhaf! Ehe~ ymhaf lddfglkwfb| euhkgnk~w~ kaknwlpkwf$~fa~hu efknha" fanu|ywfg zlwm wmf ~mkufg of|! Ymhaf~la wmf juhvy knwlpkwf wmflu uf~yfnwlpf ~fa~hu~! Hanf Ehe nblno~wmf ylnwvuf" Ehe~ nkdfuk ~fag~ k efknha zlwm lw~ bhnkb wldf~$wkdy kag wmf ymhaf~ ufnhug lw! Ymhaf wh ymhaf nhddvalnk$wlha l~ yfu`hudfg v~laj wmf Zl@l kg mhn dhgf! K`wfu k wmuf~m$hbg wldf `uhd wmf nblno" wmf ymhaf~ gfknwlpkwf wmflu ~fa~hu~"

  • 8/6/2019 TagSense Android Spy Application By Microsoft Interns Chaun Qin and Xuan Bao: Technical Paper

    4/14

    @ljvuf 53 Wkj^fa~f kunmlwfnwvuf wmf nkdfuk ymhaf wuljjfu~ ~fa~laj la ykuwlnlykwlaj dhelbf ymhaf~ kag jkwmfu~ wmf~fa~fg la`hudkwlha! Lw wmfa gfwfudlaf~ zmh l~ la wmf ylnwvuf kag wkj~ wmf ylnwvuf zlwm wmf yfhybf kag wmf nhawf}w!

    yfu`hud ek~ln knwlplw| ufnhjalwlha ha wmf ~fa~fg la`hudkwlha"kag ~fag wmfd ekno wh Ehe~ ymhaf! Ehe~ ymhaf k~~ldlbkwf~wmf~f yfu$yfu~ha knwlplwlf~" kag kb~h la`fu~ ~hdf nhawf}wvkbla`hudkwlha `uhd lw~ hza ~fa~hu~" lanbvglaj bhnkwlha" kdel$faw ~hvag" bljmw" fwn!

    Wmf yfu$yfu~ha knwlplwlf~ kuf ufnflpfg `uhd fknm ymhaf la wmfjuhvy" ahw afnf~~kulb| wmh~f zmh zfuf la wmf ylnwvuf! Wmv~"Ehe~ ymhaf dv~w wfbb zmlnm ymhaf$hzafu~ zfuf la wmf yln$wvuf" kag wkj lw knnhuglajb|! Eulfst|" Wkj^fa~f kghyw~ wmuffdfnmkal~d~! -;, Zmfa yfhybf f}yblnlwb| yh~f `hu wmf ylnwvuf"Wkj^fa~f f}wuknw~ k ykv~f ~ljakwvuf `uhd wmf knnfbfuhdfwfuufkglaj~! Wml~ ykv~f ~ljakwvuf nhuufbkwf~ zfbb zlwm wmf wldlaj

    h` wmf ymhwh$nblno" kag l~ `hvag wh ef dh~wb| ke~faw la yfhybfzmh kuf ahw yh~laj `hu wmf ylnwvuf! -5, Yfhybf la wmf ylnwvufkuf h`wfa `knfg whzkug~ wmf nkdfuk! Wkj^fa~f bfpfukjf~ wmfymhaf~ kag nkdfuk~ nhdyk~~ glufnwlha~ wh la`fu k dvwvkbb|`knlaj ufbkwlha~mly? wml~ mfvul~wln ldyuhpf~ wmf nhagfanf h`wmf yh~laj ~ljakwvuf~! K~ zlbb ef fplgfaw bkwfu" vaoahza kagwldf$pku|laj ymhaf hulfawkwlha~ dkof wmf yuhebfd gl`nvbw!->, @hu ylnwvuf~ la zmlnm wmf ~vecfnw~ gh ahw yh~f f}yblnlwb|"wmf Wkj^fa~f nkdfuk wkof~ dvbwlybf ~aky~mhw~! Wmf dhwlhapfnwhu~ `hu wmf ~vecfnw~ kuf nhdyvwfg `uhd wmf ~f{vfanf h`~aky~mhw~" kag wmfa nhuufbkwfg wh wmf dhwlha gfulpfg `uhdwmf ymhaf~ knnfbfuhdfwfu(nhdyk~~ ufkglaj~! Ymhaf~ wmkw f}$mlelw k jhhg nhuufbkwlha -efwzffa wmf pl~vkb kag knnfbfukwlhagldfa~lha~, kuf v~fg `hu wkjjlaj! Wmf af}w ~fnwlha pl~lw~ wmf

    gf~lja h` wmf~f wfnmal{vf~ la gfwklb!Oahzlaj zmlnm ymhaf~(yfhybf kuf la wmf ylnwvuf" Wkj^fa~ff}wuknw~ wmf nhawf}w hab| `uhd wmf~f ymhaf~! La ~hdf nk~f~"wmf nhawf}w la`hudkwlha l~ kgf{vkwf `hu glufnw wkjjlaj -f!j!"~lwwlaj" zkbolaj" laghhu" hvwghhu" fwn!,! Mhzfpfu" ~hdf dfk$~vufdfaw~ uf{vluf NYV$lawfa~lpf yuhnf~~laj -f!j!" bkvjmwfuufnhjalwlha," kag hwmfu~ ufb| ha f}wfuakb gkwkek~f~ -f!j!" JY^$wh$kgguf~~,! La wmf~f nk~f~" Wkj^fa~f f}yhuw~ wmf dfk~vuf$dfaw~ wh k nbhvg kag ufwulfpf~ kgglwlhakb wkj~! Wmf~f wkj~ kuf

    wmfa hugfufg la k zmfa$zmfuf$zmh$zmkw `hudkw k~ `hbbhz~"

    2wldf" bhjlnkb bhnkwlha"

    akdf; 2knwlplwlf~ `hu akdf;1"

    akdf5 2knwlplwlf~ `hu akdf51" !!!1

    kag vybhkgfg lawh k ~yfnlfg ufyh~lwhu|`hu ldkjf$~fkunm kaghwmfu kyyblnkwlha~!

    7! GF^LJA KAG LDYBFDFAWKWLHAWml~ ~fnwlha shhd~ lawh wmf gf~lja kag ldybfdfawkwlha h` wmflaglplgvkb nhdyhafaw~ la Wkj^fa~f! Zf kgguf~~ wmf yuldku|

    nmkbbfajf u~w" akdfb| zmh kuf la wmf ylnwvuf! Zf wmfa gf$~nulef dhgvbf~ wmkw mkagbf zmkw wmf| kuf ghlaj" kag zmfakag zmfuf wmf ylnwvuf zk~ wkofa!

    7!; ZMH kuf la wmf ylnwvufKblnf kag Chma dk| ef ~ykwlkbb| nbh~f e|" evw Ehe dk| nmhh~fwh wkof Kblnf~ ylnwvuf kbhaf! ^lanf Ehe~ ymhaf zlbb nhddv$alnkwf wh kbb ymhaf~ wmuhvjm Zl@l" kag efnkv~f ymhaf~ v~fhdalglufnwlhakb kawfaak~" lw l~ mkug wh wfbb zmlnm ymhaf~ kufykuw h` wmf ylnwvuf! Wkj^fa~f f}ybhuf~ nhdelakwlha~ h` dvb$wlybf ~fa~laj gldfa~lha~" kbhaj zlwm he~fupkwlha~ kehvw mv$dka efmkplhu" wh lgfawl`| zmh kuf la wmf ylnwvuf! Zf yuf~faw> dkla hyyhuwvalwlf~3 -;, knnfbfuhdfwfu ek~fg dhwlha ~ljak$wvuf~" -5, nhdybfdfawku| nhdyk~~ glufnwlha~" kag ->, dhwlha

    nhuufbkwlha knuh~~ pl~vkb kag knnfbfuhdfwfu(nhdyk~~!-;, Knnfbfuhdfwfu ek~fg dhwlha ~ljakwvuf~

    Zf ldkjlafg wmkw zmfa ~vecfnw~ yh~f `hu k ylnwvuf" wmflu ymhaf~kuf blofb| wh f}mlelw k dhwlha ~ljakwvuf wmkw l~ gl``fufaw `uhdwmh~f ahw yh~laj! Wmf lawvlwlha l~ wmkw wmf ~vecfnw~ h` wmf yln$wvuf h`wfa dhpf lawh k ~yfnln yh~wvuf la yufykukwlha `hu wmf

    ylnwvuf" ~wk| ~wlbb gvulaj wmf ylnwvuf$nblno" kag wmfa dhpf kjklawh uf~vdf ahudkb efmkplhu! Wkj^fa~f f}yfnw~ wh ag ~vnm k~ljakwvuf kuhvag wmf wldf h` wmf ylnwvuf$nblno" evw hab| la wmfknnfbfuhdfwfu~ h` ~vecfnw~ yh~laj `hu wmf ylnwvuf! @hu wmh~f

  • 8/6/2019 TagSense Android Spy Application By Microsoft Interns Chaun Qin and Xuan Bao: Technical Paper

    5/14

    ahw yh~laj" wmf f}yfnwkwlha l~ wmkw wmflu dhwlha~ zhvbg ahw efla bhno$~wfy zlwm wmf ~vecfnw~" kag mfanf" wmflu knnfbfuhdf$wfu~ zlbb ahw ufpfkb ~vnm k ~ljakwvuf!

    Wh pful`| wmf f}l~wfanf h` yh~laj ~ljakwvuf~" zf gl~wulevwfgAf}v~Haf ymhaf~ wh 7 ~wvgfaw~" kag whho59 ylnwvuf~ kw gl` fu$faw wldf~ kag bhnkwlha~! Gl``fufaw ~ve~fw~ h` ~wvgfaw~ yh~fg lafknm h` wmf ylnwvuf~" kag kbb wmflu knnfbfuhdfwfu ufkglaj~ zfufufnhugfg! Wmf dfk~vufdfaw~ zfuf yuhnf~~fg h`stlaf" kag wmf

    pkulkanf pl~vkblsfg hpfu wldf! @ljvuf >-k, ~mhz~ wmf uf~vbw~`uhd k ukaghd ~ve~fw h` yfhybf wmkw zfuf la wmf ylnwvuf" zmlbf@ljvuf >-e, ~mhz~ wmf ~kdf `hu yfhybf hvw~lgf wmf ylnwvuf~!Wmf ebkno pfuwlnkb blaf laglnkwf~ wmf wldf kw zmlnm wmf ylnwvuf~zfuf wkofa! Wmf yh~laj ~ljakwvuf kyyfku~ wh ef gl~wlanw wmfknnfbfuhdfwfu pkulkanf ~ve~lgf~ hu k fz ~fnhag~ kuhvag wmfylnwvuf$nblno" kag juhz~ ekno kjkla! ^fnwlha 6 yuf~faw~ kggl$wlhakb uf~vbw~ `uhd :9 yh~laj ylnwvuf~" ufk`udlaj wmkw wmfyuf~fanf h` wmf ~ljakwvuf l~ k ufblkebf gl~nuldlakwhu!

    $6

    9

    6

    ;9

    ;6

    59

    56

    >9

    >6

    79

    $7 $5 9 5 7

    Pkulkanf

    Wldf ~

    Wldf h` ylnwvuf$nblno

    $6

    9

    6

    ;9

    ;6

    59

    56

    >9

    >6

    79

    $7 $5 9 5 7

    Pkulkanf

    Wldf -~,

    Wldf h` ylnwvuf$nblno

    @ljvuf >3 Wmf pkulkanf h` knnfbfuhdfwfu ufkglaj~ `uhdymhaf~ h` -k, wmh~f la wmf ylnwvuf kag -e, wmh~f hvw~lgfwmf ylnwvuf! Yh~laj ~ljakwvuf l~ fplgfaw la -k, kag ke~fawla -e,!

    -5, Nhdybfdfawku| Nhdyk~~ Glufnwlha~

    Zmlbf wmf yh~laj ~ljakwvuf dk| ef k ~v`nlfaw nhaglwlha whgfwfnw k yfu~ha" lw l~ heplhv~b| ahw afnf~~ku|! K yfu~ha dk|efmkpf akwvukbb| zmfa wmf ylnwvuf l~ eflaj wkofa -f!j!" fkwlaj"ybk|laj k jvlwku" dkolaj k ~yffnm, wmf yh~laj ~ljakwvuf zlbb

    ef ke~faw! Fpfa l` k yfu~ha yh~f~" lw dk| ahw ef gl~wlanw ha wmfknnfbfuhdfwfu! @ljvuf 7-k, ~mhz~ k ylnwvuf zmfuf wmf ~vecfnwzk~ ~fkwfg ha ml~ nmklu kag hab| bhhofg vy zmfa wmf ylnwvufzk~ wkofa wmf bhholaj vy glg ahw ufstfnw ha wmf knnfbfuhd$fwfu! Wkj^fa~f dkof~ ka k~~vdywlha wh ~hbpf wml~ yuhebfd!Wmf k~~vdywlha l~ wmkw yfhybf la wmf ylnwvuf uhvjmb| `knf wmfglufnwlha h` wmf nkdfuk" kag mfanf" wmf glufnwlha h`wmflu nhd$yk~~f~ zlbb ef uhvjmb| nhdybfdfawku| wh wmf nkdfuk~ `knlajglufnwlha! Wmv~" e| kakb|slaj yfhybf~ nhdyk~~ glufnwlha~"

    Wkj^fa~f f}yfnw~ wh wfbb zmh kuf la wmf ylnwvuf!

    Wmf nmkbbfajf" mhzfpfu" l~ wmkw wmf v~fu kag mfu ymhaf dk|ahw ef `knlaj wmf ~kdf glufnwlha! Wml~ l~ efnkv~f wmf ymhafdk| ef la wmf ykaw~ ~lgf$yhnofw~" la k zhdfa~ yvu~f" ekno$yhnofw~" fwn! Bfw yfu~hakb nhdyk~~ h``~fw -YNH, gfahwf wml~kajbf efwzffa wmf v~fu~ `knlaj glufnwlha kag mfu nhdyk~~-~ff @ljvuf 7-e,,! Wmf Wkj^fa~f nkdfuk nhdyvwf~ YNH k~3

    V~fu@knlaj 4 -NkdfukKajbf / ;=9, dhg >09

    Y NH 4 --V~fu@knlaj / >09, Nhdyk~~Kajbf, dhg >09

    @ljvuf 7-n, ~mhz~ wmf gl~wulevwlha h` YNH" gfulpfg `uhd 69ylnwvuf~ la zmlnm yfhybf zfuf `knlaj wmf nkdfuk! Fplgfawb|"

    k ufk~hakebf `uknwlha h` wmf ymhaf~ kuf ahw hulfawfg la wmfhyyh~lwf glufnwlha h` wmf nkdfuk fpfa wmhvjm lw~ v~fu l~ knwv$kbb| `knlaj wmf nkdfuk! Wmfuf`huf" eblagb| v~laj wmf nhdyk~~glufnwlha wh gfwfnw wmf ~vecfnw~ h` k ylnwvuf nka ef fuuhafhv~!

    Wkj^fa~f dlwljkwf~ wmf nhdyk~~ yuhebfd e| yfulhglnkbb| uf$nkbleukwlaj wmf YNH! Wmf lgfk l~ wh ag ylnwvuf~ la zmlnm ~ve$cfnw~ nka ef ufblkeb| lgfawlfg v~laj hwmfu dfwmhg~" kag v~fwmf~f ylnwvuf~ hu ufnkbleukwlha! yfnlnkbb|" l` Wkj^fa~f lgfa$wlf~ Kblnf la k ylnwvuf gvf wh mfu yh~laj ~ljakwvuf" mfu YNHnka ef nhdyvwfg lddfglkwfb|! La ~ve~f{vfaw ylnwvuf~" fpfal` Kblnf l~ ahw yh~laj" mfu YNH nka ~wlbb ufpfkb mfu `knlaj gl$ufnwlha" zmlnm la wvua lgfawlf~ zmfwmfu ~mf l~ la wmf ylnwvuf!Wml~ nka nhawlavf ~h bhaj k~ Kblnf ghf~ ahw nmkajf wmf hul$fawkwlha h` mfu ymhaf! Mhzfpfu" l` ~mf dhpf~ wmf ymhaf kagnmkajf~ lw~ YNH -~k| kw wldf wl," wmfa kbb ylnwvuf~ wkofa k`wfuwl dk| jfw fuuhafhv~b| wkjjfg! Wml~ l~ efnkv~f Wkj^fa~f zlbbdkof gfnl~lha~ ek~fg ha k ~wkbf pkbvf h` Kblnf~ YNH" bfkglajwh `kb~f yh~lwlpf~ hu `kb~f afjkwlpf~!

    Zf efblfpf wmkw Wkj^fa~f nka ef dkgf uhev~w wh ~vnm nmkajf~la YNH! Bfw v~ k~~vdf wmkw Wkj^fa~f wkof~ k ylnwvuf kw wldfwc" wc 1 wl" zmfuf Kblnf zk~ kjkla lgfawlfg ufblkeb| wmuhvjm kyh~laj ~ljakwvuf! Wkj^fa~f ufnkbleukwf~ Kblnf~ YNH kw wc " kagufpl~lw~ ylnwvuf~ wmkw zfuf wkofa efwzffa wl kag wc ! Kbb wmf~fylnwvuf~ kuf uf$kakb|sfg zlwm Kblnf~ afz YNH l` wmf afzYNH laglnkwf~ wmkw Kblnf zk~ knwvkbb| `knlaj wmf nkdfuk la kyulhu ylnwvuf" wmf nhuufnwlha l~ dkgf! La jfafukb" k~ bhaj k~ kalaglplgvkb~ YNH jfw~ yfulhglnkbb| uf$nkbleukwfg" mfu yuf~fanf

    la hwmfu ylnwvuf~ dk| ef ufblkeb| lgfawlfg! ^lanf yh~laj yln$wvuf~ kuf nhddha" zf efblfpf ~vnm ufnkbleukwlha l~ plkebf!

    Zf ahwf wmkw wmf wldf h` nmkajlaj wmf YNH" wl" dk| ahw efkbzk|~ oahza! L` wmf ymhaf~ gl~ybk| l~ wvuafg ha kw ~hdfyhlaw" Wkj^fa~f ahwf~ wmkw k~ k wldf kw zmlnm wmf YNH dk|mkpf nmkajfg! Mhzfpfu" l` wmf v~fu ghf~ ahw knwlpkwf wmfymhaf kag hab| dhpf~ lw `uhd haf hulfawkwlha wh kahwmfu" wlzlbb ufdkla vagfwfnwkebf! La ~vnm nk~f~" Wkj^fa~f hugfu~ kbbwmf ylnwvuf~ la wldf" kag lgfawlf~ wmf haf~ la zmlnm Kblnfzk~ gfwfnwfg ufblkeb| nkbb wmf~f Kblnf~ kanmhu ylnwvuf~! @hu

  • 8/6/2019 TagSense Android Spy Application By Microsoft Interns Chaun Qin and Xuan Bao: Technical Paper

    6/14

    9

    9!;

    9!5

    9!>

    9!7

    9!6

    9!0

    9!:

    9!=

    9!, k uf~fkunm bke la Mvg~ha Mkbb" kag-7, k Wmkao~jlplaj ykuw| kw k `knvbw|~ mhv~f! @hu eufplw|" zfuf`fu wh wmf~f ~nfakulh~ k~ j|d" dv~fvd" bke" kag mhv~f!

    Hvu fpkbvkwlha kld~ wh ka~zfu wmf `hbbhzlaj {vf~wlha~3 -;,Mhz zfbb ghf~ Wkj^fa~f wkj yfhybf nhdykufg wh kyyuhknmf~ek~fg ha `knf ufnhjalwlha? -5, Mhz ghf~ mvdka efmkplhu la

    gl``fufaw ~nfakulh~ k``fnw wmf laglplgvkb wkjjlaj dfwmhg~ -yh~$laj" nhdyk~~" dhwlha, fdybh|fg e| Wkj^fa~f! ->, Mhz zfbbnka Wkj^fa~f ufnhjalsf knwlplwlf~ kag nhawf}w! Zf efjla zlwmwkjjlaj yfhybf la wmf ylnwvuf" kag bkwfu fpkbvkwf knwlplw| kagnhawf}w$wkjjlaj! Zf fag zlwm k wh| ldkjf ~fkunm whhb v~lajhvu nhbbfnwlha h`599 ylnwvuf~ wkjjfg e| Wkj^fa~f!

    6!; Wkjjlaj YfhybfZf nhdykuf Wkj^fa~f zlwm Kyybf~ lYmhwh kag Jhhjbf~ Yl$nk~k" wzh yhyvbku yuhgvnw~ wmkw fdybh| `knf ufnhjalwlha! Hanfk yfu~ha~ `knf l~ dkavkbb| wkjjfg zlwm k akdf" lYmhwh kag Yl$nk~k kwwfdyw wh wkj ~ldlbku `knf~ la hwmfu ylnwvuf~! La hvu fpkb$vkwlha" zf wkjjfg fknm ykuwlnlykaw~ `knf hanf kag bfw lYmhwhkag Ylnk~k wkj hwmfu ylnwvuf~ la wmf ~fw! Haf dk| kujvf wmkwlYmhwh kag Ylnk~k yfu`hud efwwfu zlwm dhuf wuklalaj! Mhz$fpfu" zf efblfpf wmkw hvu fpkbvkwlha ~fwwlaj l~ klu k~ lw fa~vuf~~ldlbku kdhvaw h` mvdka k~~l~wkanf la kbb wmf~f ~nmfdf~!

    @ljvuf : lbbv~wukwf~ mhz zfbb Wkj^fa~f wkj~ yfhybf la k yln$wvuf3 @ljvuf :-k, ~mhz~ mhz knnvukwfb| yfhybf zfuf lanbvgfgla wmf ylnwvuf" zmlbf @ljvuf :-e, ~mhz~ mhz knnvukwfb| wmf|zfuf f}nbvgfg5! @hu f}kdybf" la wmf bk~w ylnwvuf la @ljvuf :-k,"Wkj^fa~f nhuufnwb| lgfawlf~ 5 h` wmf > yfhybf la wmf ylnwvuf!

    5La ka kwwfdyw wh yuf~fupf akwvukb efmkplhu" zf kbbhzfg yfh$ybf wh `uffb| dhpf la kag hvw h` wmf nkdfuk~ nhddvalnkwlha

  • 8/6/2019 TagSense Android Spy Application By Microsoft Interns Chaun Qin and Xuan Bao: Technical Paper

    9/14

    9 59 79 09 =9 ;99 ;59 ;79 ;09 ;=9 5999

    5

    7

    0

    =

    Ylnwvuf LG

    Avdefuh`yfhybf

    Nhuufnwb| Lanbvgfg e| Wkj^fa~f Zuhajb| F}nbvgfg e| Wkj^fa~f

    9 59 79 09 =9 ;99 ;59 ;79 ;09 ;=9 5999

    5

    7

    0

    =

    Ylnwvuf LG

    Avdefuh`yfhybf

    Zuhajb| Lanbvgfg e| Wkj^fa~f Nhuufnwb| F}nbvgfg e| Wkj^fa~f

    @ljvuf :3 Yfu`hudkanf h` Wkj^fa~f3 -k, Why kag -e, ehwwhd jukym~ ~mhz yfhybf la~lgf kag hvw~lgf fknm ylnwvuf! Zuhajb|f}nbvgfg(lanbvgfg haf~ kuf ~mhza la ufg(ebkno! Hpfukbb" Wkj^fa~f ghf~ zfbb la wkjjlaj yfhybf!

    9 59 79 09 =9 ;99 ;59 ;79 ;09 ;=9 5999

    5

    7

    0

    =

    Ylnwvuf LG

    Avd

    efuh`yfhybf

    Nhuufnwb| Lanbvgfg e| lYmhwh Zuhajb| F}nbvgfg e| lYmhwh

    @ljvuf =3 lYmhwh zuhajb| f}nbvgf~ {vlwf k `fz yfhybf! Evw hab| k `fz kuf zuhajb| lanbvgfg -jukym ahw ~mhza,!

    9 59 79 09 =9 ;99 ;59 ;79 ;09 ;=9 5999

    5

    7

    0

    =

    Ylnwvuf LG

    Avdef

    uh`yfhybf

    Nhuufnwb| Lanbvgfg e| Ylnk~k Zuhajb| F}nbvgfg e| Ylnk~k

    @ljvuf

  • 8/6/2019 TagSense Android Spy Application By Microsoft Interns Chaun Qin and Xuan Bao: Technical Paper

    10/14

    Hpfukbb" Wkj^fa~f yfu`hud~ ufk~hakeb| zfbb la ~fykukwlaj wmfyfhybf hvw~lgf `uhd wmh~f la~lgf k ylnwvuf! La nhawuk~w" @lj$vuf = ~mhz~ wmkw lYmhwh mk~ pfu| mljm `kb~f afjkwlpf~ wmhvjmhab| k `fz `kb~f yh~lwlpf~" l!f!" lYmhwh l~ knnvukwf zmfa lw gf$wfnw~ k `knf" evw lw `klb~ wh gfwfnw k bkujf `uknwlha h` `knf~!Ylnk~k" k~ ~mhza la @ljvuf

  • 8/6/2019 TagSense Android Spy Application By Microsoft Interns Chaun Qin and Xuan Bao: Technical Paper

    11/14

    Ylnk~k! Wmf bhzfu ufnkbb h` lYmhwh kag Ylnk~k jfw~ kdyblfgzmfa ~fkunmlaj `hu ylnwvuf~ h` k yklu h` yfhybf" k~ la yklu LG;5! Kb~h" ahwf wmkw ehwm lYmhwh kag Ylnk~k ufnhjalsf ~hdf la$glplgvkb~ efwwfu wmka hwmfu~" zmfufk~ Wkj^fa~f yuhplgf~ ~ld$lbku yfu`hudkanf knuh~~ kbb yfhybf!

    9!5

    9!7

    9!09!=

    ;

    Wkj fa~f3 Yufnl~lha Wkj fa~f3 Ufnkbb Wkj^fa~f3 @kbbhvw

    9!5

    9!7

    9!0

    9!=

    ;

    lYmhwh3 Yufnl~ lha lYmhwh3 Ufnkbb lYmhwh3 @kbbhvw

    ; 5 > 7 6 0 : = < ;9 ;; ;5 ;>

    9!5

    9!7

    9!09!=

    ;

    Laglplgvkb LG(Yklu LG -;9 wh ;> kuf yklu~,

    Ylnk~k3 Yufnl~lha Ylnk~k3 Ufnkb b Ylnk~k3 @kb bhvw

    @ljvuf ;53 Yfu hudkanf nhdykul~ha h` Wkj^fa~f zlwmlYmhwh kag Ylnk~k `hu akdf ek~fg ldkjf ~fkunm!

    Zf m|yhwmf~lsf wmkw Ylnk~k kag lYmhwh dk| ef kebf wh dkwnmWkj^fa~f~ yfu`hudkanf e| wvalaj nfuwkla ykukdfwfu~! Mhz$fpfu" Wkj^fa~f l~ k ak~nfaw ~|~wfd -nhdykufg wh |fku~ h` uf$~fkunm efmlag Ylnk~k(lYmhwh," kag zf efblfpf wmkw `vuwmfu la$

    pf~wljkwlha nka ldyuhpf Wkj fa~f~ nkykelblwlf~ k~ zfbb! Yfu$mky~ dhuf ldyhuwkawb|" wmf lawfjukwlha h` ehwm wmf kyyuhknmf~nka ef ~vyfulhu wh flwmfu h` wmfd! La hvu `vwvuf zhuo" zf ybkawh yfu`hud ~vnm ka lawfjukwlha" ufla`hunlaj ~fa~laj$ek~fg ky$yuhknmf~ zlwm `knf ufnhjalwlha" kag plnf pfu~k!

    6!5 Wkjjlaj Knwlplwlf~ kag Nhawf}wWkj^fa~f yuhnf~~f~ wmf ~fa~hu gkwk `uhd ymhaf~ wh nufkwf kn$wlplw|(nhawf}wvkb wkj~ `hu wmf ylnwvuf! K~ ka f}kdybf" wmf j$vuf efbhz ~mhz~ k nbhvg h` wkj~ k~~ljafg wh ylnwvuf~ la wmfj|d! He~fupf wmkw wmf bhnkwlha" ykuwlnlykaw~" kag ~ldybf kn$wlplwlf~ -~vnm k~ ybk|laj kag cvdylaj, kyyfku la wmf nbhvg -wmf~lsf h` fknm wkj ~nkbfg e| lw~ `uf{vfan| h` hnnvuufanf,!

    Wmf k~~f~~dfaw h` ka knwlplw|$wkjjlaj ~nmfdf l~ ahw ~wukljmw$`huzkug ~lanf wmf juhvag wuvwm l~ ukwmfu ~vecfnwlpf! Wmfuf`huf"zf ufb| ha mvdka~ wh cvgjf wmf ufbfpkanf kag nhdybfwfaf~~h` wkj~ jfafukwfg e| Wkj^fa~f! ^lanf nhdybfwfaf~~ l~ k `van$wlha h` wmf phnkevbku| h` wkj~" zf bldlwfg wmf f}yfuldfaw whhab| Wkj^fa~f~ phnkevbku|! Zf k~ofg mvdka~ wh ylno k ~fw h`wkj~ `hu wmf ylnwvuf `uhd wmf jlpfa phnkevbku|! Zf nka wmfagfaf yufnl~lha kag ufnkbb k~ `hbbhz~!

    yufnl~lha 4 rWkj~ e| Mvdka~ Wkj~ e| Wkj^fa~frrWkj~ e| Wkj^fa~fr

    ufnkbb 4rWkj~ e| Mvdka~ Wkj~ e| Wkj^fa~fr

    rWkj~ e| Mvdka~r

    Zf gh ahw gfaf k dfwuln blof `kbb$hvw mfuf ~lanf zf nka ahwdfkalaj`vbb| ehvag wmf whwkb ~fw h` wkj~ wmkw kuf nha~lgfufgluufbfpkaw wh wmf ylnwvuf" kag wmfa ag wmf `uknwlha h` wmh~fwmkw kuf lanhuufnwb| wkjjfg e| Wkj^fa~f!

    @ljvuf ;> ~mhz~ wmf uf~vbw~ zlwm 6 mvdka phbvawffu~ k~~f~~$laj Wkj^fa~f~ knwlplw| wkj~>! K~ fplgfaw" dh~w h` wmf wkj~yuhgvnfg e| Wkj^fa~f kuf ufbfpkaw kag kb~h ~hdfzmkw gf$~nulef wmf nhawf}w h` wmf yfhybf la wmf ylnwvuf~! H` nhvu~f"

    zlwm k ~dkbb wkj phnkevbku| -h` kuhvag >9 knwlplw| wkj~," wml~~mhvbg ahw ef plfzfg k~ k nhanufwf uf~vbw! Ukwmfu" wml~ hab|~vjjf~w~ wmkw wmf Wkj^fa~f `ukdfzhuo nka ef v~f`vb" l` lw~ ph$nkevbku| juhz~ hpfu wldf e| ehuuhzlaj `uhd knwlplw| ufnhjal$wlha" knhv~wln ~fa~laj" kag ~ljakb yuhnf~~laj nhddvalwlf~!

    ; 5 > 7 69

    9!5

    9!7

    9!0

    9!=

    ;

    K

    pfukjfYufnl~lha(Ufnkbb

    Ufplfzfu LG

    Yufnl~lha Ufnkbb

    @ljvuf ;>3 K~~f~~dfaw h` wkj~ jlpfa e| Wkj^fa~f!

    6!> Wkj Ek~fg Ldkjf ^fkunmWh vagfu~wkag v~fu$nfawuln yfu`hudkanf h` Wkj^fa~f" zf ld$ybfdfawfg k wh| ldkjf$~fkunm fajlaf uvaalaj ha hvu ~fw h`599 wkjjfg ylnwvuf~! Zf ufnuvlwfg 6 phbvawffu~ kag ~mhzfgwmfd 59 ylnwvuf~ fknm -ukaghdb| ylnofg `uhd wmf 599,! Wmf|zfuf wmfa k~ofg wh nhdyh~f {vfu| ~wulaj~ uhd hvu wkj phnke$vbku| kag ufwulfpf fknm h` wmf ylnwvuf~ wmf| nhvbg kb~h v~f

    akdf~ h` yfhybf la wmflu {vfulf~! @hu wmf jlpfa ~fkunm ~wulaj"hvu ~|~wfd ufwvuafg k ~fw h` ylnwvuf~! Wmf phbvawffu dkuofgwmf avdefu h` ufbfpkaw ylnwvuf~ kag kb~h zmfwmfu wmf wkujfwylnwvuf l~ haf h` wmfd -zf nkbb wml~ k mlw,! Wkebf ; ~mhz~ wmfyfu$phbvawffu yfu`hudkanf uf~vbw~!>Wmf phbvawffu~ zfuf ufnuvlwfg `uhd hvu uf~fkunm juhvydfdefu~ kag wmflu `ulfag~! Wmhvjm wmfuf l~ k yhwfawlkb `huelk~ mfuf" wmf phbvawffu~ mkpf effa f}yblnlwb| k~ofg wh yuhplgfhecfnwlpf k~~f~~dfaw! @vuwmfudhuf" zf ahwf wmkw wml~ k~~f~~$dfaw e| k ~dkbb juhvy h` yfhybf l~ dfkaw wh ef lbbv~wukwlpf"kag k euhkgfu v~fu ~wvg| l~ f~~fawlkb wh pkblgkwf hvu uf~vbw~!

  • 8/6/2019 TagSense Android Spy Application By Microsoft Interns Chaun Qin and Xuan Bao: Technical Paper

    12/14

    Wkebf ;3 Yfu`hudkanf h` wkj ek~fg ldkjf ~fkunm

    Akdf Kpj! Ufbfpkaw Kpj! Luufbfpkaw Mlw ukwfV~fu ; 5!:6 7!=6 9!=6V~fu 5 6!0 ;!= 9!06V~fu > 7!96 5 9!6V~fu 7 7!96 5!>6 9!:V~fu 6 5!66 ;!0 9!66

    @ljvuf ;7 shhd~ lawh wmf uf~vbw~ h` v~fu 7 zlwm dfglvd ~fkunm~kwl~`knwlha! @hu fknm ~fkunm ~wulaj" lw ~mhz~ wmf avdefu h`ufbfpkaw kag luufbfpkaw ylnwvuf~! Wmf ~fkunm ~wulaj l~ dkuofgzlwm k # l` lw l~ k mlw" k } hwmfuzl~f! Zmlbf Wkj^fa~f ghf~ahw yufnl~fb| ufwvua wmf wkujfw ylnwvuf~ la kbb nk~f~ kag ufwvua~luufbfpkaw haf~ la ~hdf nk~f~" zf efblfpf wmkw wmf hpfukbb uf$~vbw~ kuf fanhvukjlaj `hu nhawlavfg uf~fkunm la wml~ glufnwlha!

    5 7 0 = ;9 ;5 ;7 ;0 ;= 599

    5

    7

    0

    =

    ;9

    ;5

    ;7

    ;0

    ;=

    Avdefuh`ufwulfpfguf~vbw~

    ^fkunm ~wulaj LG

    Ufbfpkaw Luufbfpkaw Mlw Dl~~

    @ljvuf ;73 Wmf dfk~vuf h` ~kwl~`knwlha h` k v~fu h`Wkj^fa~f ek~fg ldkjf ~fkunm ~|~wfd!

    0! BLDLWKWLHA^ H@ WKJ^FA^FLa wml~ ~fnwlha" zf yuf~faw ~hdf yhwfawlkb nhanfua~ zlwm Wkj^fa~f"kag gl~nv~~ mhz wmf| nka ef kbbfplkwfg!

    Wkj^fa~f phnkevbku| h` wkj~ l~ {vlwf bldlwfg! Wkj^fa~f l~afnf~~kulb| bldlwfg e| wmf knwlplwlf~ wmkw nka ef ufnhjalsfg zlwm ymhaf ~fa~hu~! Evw wmf wkj~ k~~ljafg e| mvdka~ kufdvnm ulnmfu wmka ka| ~hyml~wlnkwfg kvwh wkjjlaj kyyuhknm!Mhzfpfu" `uhd wmf yfu~yfnwlpf h` ldkjf ~fkunm kag ufwulfpkb"wmf bldlwfg phnkevbku| dk| ~v`nf!

    Wkj^fa~f ghf~ ahw jfafukwf nkywlha~! Wmhvjm k akwvukbaf}w ~wfy" nkywlhalaj k ylnwvuf l~ mkug `hu Wkj^fa~f jlpfa lw~bldlwfg phnkevbku|! Mhzfpfu" l` lw jfafukwf~ wkj~ blof" Nmvka" ]vka" ybk|laj" efknm" akwvukb bkajvkjf yuhnf~~laj dk| efkebf wh ~wulaj wmfd whjfwmfu wh dkof k nkywlha blof Nmkvakag ]vka ybk|laj kw wmf efknm!

    Wkj^fa~f nkaahw wkj ylnwvuf~ wkofa la wmf yk~w! Lw uf{vluf~

    knwlpf ufnhuglaj h` ~fa~hu ufkglaj~ zmlbf wkolaj wmf ylnwvuf!La wmkw ~fa~f" ldkjf yuhnf~~laj kyyuhknmf~ kuf euhkgb| ky$yblnkebf wh k pkulfw| h` ldkjf~! Mhzfpfu" bhholaj `huzkug"Wkj^fa~f nka jufkwb| mfby la wkjjlaj ymhwh~ laphbplaj yfhybf"zmlnm `hud k evbo h` ldkjf ~fkunmf~!

    Wkj^fa~f uf{vluf~ v~fu~ wh layvw k juhvy yk~~zhug kw wmfefjlaalaj h` k ymhwh ~f~~lha! Haf nhvbg kujvf wmkw v~fu~dk| k `ffb k blwwbf lanhapfalfanfg e| wml~ uf{vlufdfaw! Mhz$fpfu" wml~ nka ef kbbfplkwfg ~lanf dh~w ylnwvuf~ `uf{vfawb| la$phbpf `kdlb| dfdefu~" nbh~f `ulfag~" hu ufjvbku nhawknw~! Wmfuf$

    `huf" lw l~ nhanflpkebf wh mkpf yuf~fw yk~~zhug~ `hu wmf~f juhvy~kag gf kvbw wh haf ek~fg ha wmf ylnwvuf nhawf}w(bhnkwlha! Wmfa"Wkj^fa~f v~fu~ affg wh f}yblnlwb| ~yfnl`| k yk~~zhug hab| hak `fz hnnk~lha~!

    Wkj^fa~f dfwmhg~ `hu wkjjlaj yfhybf kuf nhdybf}! K ~ld$ybfu dkavkb kbwfuakwlpf wh Wkj^fa~f" haf dljmw nha~lgfu" l~ whgl~ybk| wmf bl~w h` yfhybf afku wmf nkdfuk kag bfw wmf nkdfuk$v~fu ~fbfnw `uhd wmkw ~dkbb bl~w! Zf ahwf wmkw gfwfudlalaj wmf

    bl~w h` yfhybf la wmf plnlalw| -v~laj ka kg mhn Zl@l afwzhuo, l~ykuw h` wmf Wkj^fa~f kunmlwfnwvuf! Dhufhpfu" zmfa wkolaj wmfylnwvuf" yfhybf kuf offa ha nkywvulaj wmf dhdfaw kag dk|fk~lb| jfw kaah|fg zlwm ka| gl~wuknwlha~! Zmlbf lw l~ yh~~lebfwh ufnhug ~hdf dfwk la`hudkwlha wh klg wmf v~fu~ h`stlaf" wmf|dk| ahw ehwmfu wh wkj wmfd bkwfu! Zf efblfpf wmkw v~fu~ yuf`fu~fkdbf~~ wkjjlaj kag Wkj^fa~f dfwmhg~ nka ef ufgf~ljafgkag ufafg wh dkof wkjjlaj dhuf f`nlfaw kag knnvukwf!

    :! @VWVUF H@ WKJ^FA^FWkj fa~f l~ ka kbwfuakwlpf zk| wh kgguf~~ k bhaj~wkaglaj yuhe$bfd h` kvwhdkwln ldkjf wkjjlaj! Zmlbf hvu nvuufaw yuhwh$w|yf mk~ ~hdf bldlwkwlha~" zf kujvf wmkw `vwvuf wfnmahbhjlnkbwufag~ kuf zfbb kbljafg zlwm wmf Wkj^fa~f kunmlwfnwvuf! Zf

    bl~w ~hdf h` wmf~f wufag~ efbhz kag gl~nv~~ wmflu ldyblnkwlha~!

    ^dkuwymhaf~ kuf efnhdlaj nhawf}w$kzkuf zlwm yfu~hakb~fa~laj _;7T! Knwlplw| ufnhjalwlha uf~fkunm l~ efjlaalaj whgfwfudlaf zmfuf k yfu~ha l~ kag zmkw ~mf l~ ghlaj v~laj mfu~dkuwymhaf~ ~fa~hu~ _;0T! Wkj^fa~f nka ef euhkgb| plfzfgk~ wmf yuhnf~~ h` kyyb|laj k ~ykwlh$wfdyhukb bwfu ha yfu$~hakb ~fa~laj! Lw kdhvaw~ wh lgfawl`|laj wmf gfplnf~ wmkw `kbbzlwmla wmf ~yknf nhpfufg e| wmf nkdfuk kajbf" kag jkwmfulajwmflu knwlplw| kag nhawf}w kw wmf wldf h` nblno! Plfzfg wml~ zk|"kbb wmf uf~fkunm ha knwlplw| ufnhjalwlha `ffg~ lawh kag knw~ k~k `hunf dvbwlyblfu `hu Wkj^fa~f!

    ^dkuwymhaf~ dk| mkpf glufnwlhakb kawfaak~ _;:T! ^hdfuf~fkunmfu~ kgphnkwf f{vlyylaj ~dkuwymhaf~ zlwm glufnwlhakbkawfaak~ wh knmlfpf mljm wmuhvjmyvw _;:T! Jlpfa wmf la~k$wlkebf gfdkag `hu ekagzlgwm" wml~ dk| ef k plkebf hywlha lawmf afku `vwvuf! Zmfa wmf nkdfuk mk~ k glufnwlhakb kawfaak"vyha k nblno" lw nka ~fag k glufnwlhakb euhkgnk~w bldlwlaj wmfkufk h` ufnfywlha wh wmkw nhpfufg e| wmf nkdfuk kajbf! Wmfankdfuk zlbb ufnflpf uf~yha~f~ hab| `uhd wmh~f wmkw kuf la wmfylnwvuf! Wml~ dkof~ wkjjlaj yfhybf ehwm ~ldybf kag knnvukwf!

    Wmf jukavbkulw| h` bhnkblskwlha zlbb kyyuhknm k `hhw _;=T!Jlpfa wmf gulpf whzkug~ bhnkblskwlha" lw zlbb ahw ef bhaj ef`hufk yfu~ha nka ef bhnkblsfg wh k ~yhw zlwmla k `ffw! Wmfa" lw l~~wukljmw`huzkug wh lgfawl`| yfhybf wmkw kuf bhnkwfg zlwmla wmfkufk nhpfufg e| wmf nkdfuk kajbf! Fpfa zlwmhvw ke~hbvwf nh$huglakwf~" bhnkblskwlha ufbkwlpf wh nkdfuk zhvbg ~v`nf! Wmf

    kelblw| wh dfk~vuf gl~wkanf efwzffa wzh afkue| ~dkuwymhaf~zhvbg kb~h klg Wkj^fa~f _;

  • 8/6/2019 TagSense Android Spy Application By Microsoft Interns Chaun Qin and Xuan Bao: Technical Paper

    13/14

    =! UFBKWFG ZHUOLdkjf wkjjlaj mk~ effa k whyln h` f}wfa~lpf uf~fkunm jlpfa lw~kyyblnkwlha~ wh ldkjf ufwulfpkb _5557T! Efnkv~f h` wmf nmkb$bfajlaj akwvuf h` wml~ yuhebfd" hvw$h`$ekag ~hbvwlha~ mkpf kw$wuknwfg kwwfawlha h` bkwf! Ka kyyuhknm la _56T nhdyvwf~ fpfawkag bhnkwlha juhvylaj~ h` ymhwh~ ek~fg ha wmflu wldf kag bh$nkwlha! K~ wmf v~fu wkj~ ~hdf yfhybf la wmflu nhbbfnwlha" ykw$wfua~ h` uf$hnnvuufanf kag nh$hnnvuufanf h` gl``fufaw yfhybfla gl``fufaw bhnkwlha~ kag fpfaw~ kuf f}yfnwfg wh fdfujf! Wmf~|~wfd v~f~ wmf~f ykwwfua~ wh k~~l~w v~fu~ la wkjjlaj ylnwvuf~e| ~vjjf~wlaj k ~mhuw bl~w h` nkaglgkwf~! Zmlbf wml~ fk~f~ wmfyuhnf~~ h` dkavkb wkjjlaj" Wkj^fa~f kld~ wh kvwhdkwf lw! Dh$elbf Dfglk Dfwkgkwk -DDD, _50T jkwmfu~ nhawf}wvkb dfwk$gkwk ~vnm k~ bhnkwlha kw wmf wldf h` nkywvuf! Lw kb~h jfafukwf~dhuf dfwkgkwk hu wmf nkywvufg ldkjf ek~fg ha wmf dfwkgkwkh` ~ldlbku ldkjf~ kw wmf ~fupfu! Wmf ~ldlbkulw| l~ gfwfudlafgek~fg ha ldkjf bhnkwlha kag yl}fb gkwk! Zmfa wmf ~|~wfd l~ahw nfuwkla kehvw wmf ~ldlbkulw|" wmf v~fu l~ yuhdywfg `hu nha$udkwlha! Wmf DDD kyyuhknm l~ dhuf ~vlwkebf `hu bkagdkuoylnwvuf~ zmfufk~ Wkj^fa~f wkujfw~ yfhybf$nfawuln ylnwvuf~!

    Kdhaj kbb wmf fkublfu zhuo~ ha wkjjlaj" Nhawf}wNkd _5:Tl~ wmf dh~w ufbfpkaw wh hvu zhuo! Ehwm Wkj^fa~f kag Nha$

    wf}wNkd mkpf ~ldlbku hecfnwlpf~ evw wmflu ~hbvwlha~ kuf {vlwfgl``fufaw! Nhawf}wNkd kaahwkwf~ plgfh~ kw wmf yhlaw h` nky$wvuf zlwm yfhybf la kag kuhvag k ~nfaf! Lw knmlfpf~ wml~ e|ybknlaj vbwuk~hvag ufnflpfu~ ha k mhulshawkb ybkaf la `uhawh` wmf nkdfuk! Dhufhpfu" fknm laglplgvkb mk~ wh zfku k gf$ plnf wmkw yfulhglnkbb| nmluy~ ka vbwuk~hvag ~f{vfanf! Wmf~fvbwuk~hvag ufnflpfu~ kag fdlwwfu~ kuf v~fg wh gfwfudlaf wmfufbkwlpf gl~wkanf efwzffa ka laglplgvkb kag wmf nkdfuk" kagzmfwmfu k yfu~ha l~ la wmf plfz h` wmf nkdfuk! La nhawuk~w"Wkj^fa~f h``fu~ k dhuf yuknwlnkb ~hbvwlha! Wkj^fa~f" wh wmfef~w h` hvu oahzbfgjf" l~ wmf u~w ldkjf wkjjlaj ~|~wfd wmkwbfpfukjf~ wmf ~fa~laj kelblw| h` wmf nvuufaw ~dkuwymhaf~!

    Wmf lgfk~ la Wkj^fa~f evlbg ha wmuff wmufkg~ h` uf~fkunm3 dh$elbf ~fa~laj" knwlplw| ufnhjalwlha kag ldkjf(kvglh yuhnf~~laj!

    Zmlbf fknm wmufkg l~ nhdyh~fg h` ulnm ehglf~ h` uf~fkunm" zf~vupf| hab| k `fz h` wmfd la wmf lawfuf~w h` ~yknf!

    Dhelbf ~fa~laj! ^dkuwymhaf~ kuf efnhdlaj k nhapfujfawybkw`hud `hu yfhybf$nfawuln ~fa~laj _5="59T yuhyh~f~ ka laahpkwlpf lgfk h`v~laj ~fa~hu~ ha wmf nkdfuk wh gfnlgf zmfa ylnwvuf~ ~mhvbgef wkofa! ^hvag fa~f _:T wky~ lawh wmf ~hvag ghdkla whlgfawl`| fpfaw~ la k yfu~ha~ bl`f" kag evlbglaj k kvglh chvu$akb! ^vuuhvag^fa~f _;5T ~mhz~ wmf yh~~lelblw| h` kdelfanf$~fa~laj la gfwfudlalaj k v~fu~ bhnkwlha! Nfa~fdf kag Aful$nfbb _;7">;T gfwfnw v~fu kag wuk`n ~wkwv~ kag ~mkuf wmf la`hu$dkwlha wmuhvjm hablaf afwzhuo~! Kbb wmf~f kyyblnkwlha~ ~mkuf

    wmf pl~lha h` bfpfukjlaj dhelbf ymhaf~ k~ k yhlaw h` mvdkakwwknmdfaw wh jkla la~ljmw~ lawh mvdka efmkplhu kag knwlp$lw|! Wkj^fa~f l~ la ka hyyhuwvaf yh~lwlha wh `vbb| efafw `uhdwml~ juhzlaj ehg| h` uf~fkunm!

    Knwlplw| ufnhjalwlha! Knwlplw| ufnhjalwlha mk~ ufnfawb| wkofayuhdlafanf zlwm kgpkanfdfaw~ la gkwk dlalaj kag dknmlafbfkualaj kbjhulwmd~! Uf~fkunmfu~ kuf bhholaj lawh knwlplwlf~wmuhvjm pkulhv~ la`hudkwlha ~hvunf~ _;9" >5T" wfdyhukb kn$wlplw| nhuufbkwlha~ _;;T kag la gl``fufaw fapluhadfaw ~fwwlaj~_>>">7T! Zf `huf~ff ~hdf h` wmf~f kbjhulwmd~ nhdlaj wh dh$

    elbf ymhaf~" kag efnhdlaj kdfakebf wh Wkj^fa~f!

    Ldkjf(kvglh yuhnf~~laj! Ldkjf kag kvglh yuhnf~~laj kuflawfjukb wh Wkj^fa~f _>6T! Zf kbufkg| v~f hywlnkb sthz _;>">0T" evw wmfuf kuf ~fpfukb hwmfu hyyhuwvalwlf~ wh v~f ldkjfyuhnf~~laj `hu bkefblaj! Wmf blwfukwvuf l~ pk~w" evw nka efzfbb ~vddkulsfg e| mhz Jhhjbf Jhjjbf~ l~ kyyuhknmlaj wmfyuhebfd! Ka| kgpkanfdfaw~ zlwm Jhhjbf Jhjjbf~ kag ~ldl$bku ~h`wzkuf~ zlbb ef kdyblfg wmuhvjm wmf dvbwl$gldfa~lhakb

    ~fa~laj ek~fg kyyuhknm la Wkj^fa~f!

    :T! Wkj^fa~f bfpfukjf~wml~ wufag wh kvwhdkwlnkbb| wkj ylnwvuf~ zlwm yfhybf kag wmfluknwlplwlf~! Zf gfpfbhyfg wmuff gl``fufaw dfwmhg~ ek~fg hayh~laj" nhdyk~~" kag dhpfdfaw" wh lgfawl`| wmf yfhybf lak ylnwvuf! Zf ldybfdfawfg k yuhwhw|yf h` Wkj^fa~f v~lajJhhjbf Af}v~ Haf ymhaf~ kag fpkbvkwfg lw~ yfu`hudkanf hakuhvag 599 ylnwvuf~! Hvu f}yfuldfaw~ ~mhz wmkw Wkj^fa~fmk~ ~hdfzmkw bhzfu yufnl~lha kag nhdykukebf `kbb$hvw evw~ljalnkawb| mljmfu ufnkbb wmka lYmhwh(Ylnk~k! Wkj^fa~f kaglYmhwh(Ylnk~k fdybh| nhdybfdfawku| kyyuhknmf~ kag nka ef

    kdkbjkdkwfg |lfbglaj k uhev~w ~nmfdf `hu wkjjlaj ldkjf~!

    ;9! KNOAHZBFGJFDFAWZf ~lanfufb| wmkao hvu ~mfymfug Ck~ha Mhaj" k~ zfbb k~ wmfkaha|dhv~ ufplfzfu~" `hu wmflu pkbvkebf `ffgekno ha wml~ yk$yfu! Zf wmkao wmf ~wvgfaw~ h` wmf ^|AUJ uf~fkunm juhvykw Gvof Valpfu~lw| `hu kjufflaj wh ykuwlnlykwf la wmf ylnwvuf$~f~~lha~" kag yuhplglaj wmhvjmw~ kag lgfk~ hu wmf efwwfudfawh` Wkj^fa~f! Zf kuf kb~h jukwf`vb wh A^@ `hu ykuwlkbb| `vaglajwml~ uf~fkunm wmuhvjm wmf `hbbhzlaj jukaw~ NA^$977=5:5"NA^$9T Jhhjbf Ldkjf Bkefbfu"mwwy3((ldkjf~!jhhjbf!nhd(ldkjfbkefbfu(" !

    _7T B! Pha Kma kag B! Gkeel~m" Bkefblaj ldkjf~ zlwm knhdyvwfu jkdf" la KND ^LJNML" 5997!

    _6T Wlaj}la \ka" Plok~ Ovdku" kag Gffyko Jkaf~ka"Nuhzg~fkunm3 f}ybhlwlaj nuhzg~ `hu knnvukwf ufkb$wldfldkjf ~fkunm ha dhelbf ymhaf~" la KND Dhel^|~"59;9!

    _0T W! Akokovuk" \! ^vdl" kag W! Al~mlgk" Afku|3

    nhapfu~kwlha fbg gfwfnwlha ek~fg ha ~ldlbkulw| h`kvglwhu| ~lwvkwlha" KND MhwDhelbf" 599

    Nkdyefbb" ^hvag^fa~f3 ~nkbkebf ~hvag ~fa~laj `huyfhybf$nfawuln kyyblnkwlha~ ha dhelbf ymhaf~" la KND

    Dhel^|~" 599

  • 8/6/2019 TagSense Android Spy Application By Microsoft Interns Chaun Qin and Xuan Bao: Technical Paper

    14/14

    _;9T B! Ekh kag ^!^! Lawlbbf" Knwlplw| ufnhjalwlha `uhdv~fu$kaahwkwfg knnfbfukwlha gkwk" Yfupk~lpfNhdyvwlaj" 5997!

    _;;T G!M! Mv" ^!C! Yka" P!Z! Smfaj" A!A! Blv" kag [! \kaj"Ufkb zhubg knwlplw| ufnhjalwlha zlwm dvbwlybf jhkb~" la

    KND VelNhdy" 599=!_;5T D! Ksls|ka" L! Nha~wkagknmf" kag U! Uh| Nmhvgmvu|"

    ^vuuhvag^fa~f3 dhelbf ymhaf bhnkblskwlha plkkdelfanf ajfuyulawlaj" la KND DhelNhd" 599

    _;>T N! Blv" Ef|hag Yl}fb~3 F}ybhulaj Afz Ufyuf~fawkwlha~kag Kyyblnkwlha~ `hu Dhwlha Kakb|~l~" la GhnwhukbWmf~l~ DLW" 599

    _;7T F! Dlbvssh" A! G! Bkaf" O! @hghu" U! Yfwfu~ha" M! Bv"D! Dv~hbf~l" ^! E! Fl~fadka" ]! Smfaj" kag K! W!Nkdyefbb" ^fa~laj Dffw~ Dhelbf ^hnlkb Afwzhuo~3 WmfGf~lja" Ldybfdfawkwlha kag Fpkbvkwlha h` NfanfDfKyyblnkwlha" la KND ^fa~|~" 599=!

    _;6T D! Eukva kag U! ^yulaj" Faola"mwwy3(( faolaebhj!ebhj~yhw! nhd(!

    _;0T F! Kuha~ha" A! Ebkaf|" N! ^wfymka" C! ^lof~" kagD! ^akyy" Wmf clj~kz nbk~~uhhd" Ldyuhplaj Knkgfdln

    Knmlfpfdfaw3 Ldyknw h` Y~|nmhbhjlnkb @knwhu~ haFgvnkwlha" 5995!

    _;:T K!K! ^kal" B! Smhaj" kag K! ^kemkuzkb" GlufnwlhakbKawfaak Glpfu~lw| `hu Dhelbf Gfplnf~3Nmkuknwfulskwlha~ kag ^hbvwlha~" la KND DhelNhd"59;9!

    _;=T O! Nmlawkbkyvgl" K! Ykgdkakemk L|fu" kag P!A!Ykgdkakemka" Laghhu bhnkblskwlha zlwmhvw wmf ykla"la KND Dhelnhd" 59;9!

    _;^wk| Mhdf" Afz \huo Wldf~" Gfn 59;9!

    _55T U! Gkwwk" G! Ch~ml" C! Bl" kag C!S! Zkaj" Ldkjfufwulfpkb3 Lgfk~" lastvfanf~" kag wufag~ h` wmf afz kjf"

    KND N^VU" 599=!_5>T Jv~wkph Nkuafluh" Kawhal E! Nmka" Yfguh C! Dhufah"

    kag Avah Pk~nhanfbh~" ^vyfupl~fg bfkualaj h`~fdkawln nbk~~f~ `hu ldkjf kaahwkwlha kag ufwulfpkb"

    LFFF Wuka~knwlha~ ha Ykwwfua Kakb|~l~ kag DknmlafLawfbbljfanf" phb! 5_59T G!M! Ajv|fa" J! Dkunv" J!U! Mk|f~" O!A! Wuvhaj"C! ^nhww" D! Bkajmflaulnm" kag N! Uhgvafu"Fanhvawfulaj ^fa~fNkd3 yfu~hakb ufnhuglajwfnmahbhjlf~ la fpfu|gk| bl`f" la KND Vel{vlwhv~

    nhdyvwlaj" 599;T Y! Dhmka" P! A! Ykgdkakemka" kag U! Ukdcff"

    Afulnfbb3 Ulnm dhalwhulaj h` uhkg kag wuk`nnhaglwlha~ v~laj dhelbf ~dkuwymhaf~" la KND ^fa^|~"599=!

    _>5T C! Bf~wfu" E! Mkaak`hug" kag J! Ehuulfbbh" Kuf \hvzlwm Df8$V~laj Knnfbfuhdfwfu~ wh Gfwfudlaf L` WzhGfplnf~ Kuf Nkuulfg e| wmf ^kdf Yfu~ha" Yfupk~lpfNhdyvwlaj" 5997!

    _>>T W! pka Ok~wfufa" K! Ahvbk~" J! Fajbfelfaaf" kagE! Ouh~f" Knnvukwf knwlplw| ufnhjalwlha la k mhdf~fwwlaj" la KND Velnhdy" 599=!

    _>7T D! Bfh" W! GHukslh" L! Jahal" Y! ^ykjahbh" kagK! Gl~wkawf" Nhdybf} mvdka knwlplw| ufnhjalwlha `hu

    dhalwhulaj zlgf hvwghhu fapluhadfaw~" la LFFF LNYU"5997!_>6T E! Bhjka" Dfb `uf{vfan| nfy~wukb nhf`nlfaw~ `hu dv~ln

    dhgfblaj" la L^DLU" 5999!_>0T ^! Ekofu" G! ^nmku~wfla" CY Bfzl~" ^! Uhwm" D!C! Ebkno"

    kag U! ^sfbl~ol" K gkwkek~f kag fpkbvkwlhadfwmhghbhj| `hu hywlnkb sthz" la LFFF LNNP" 599:!

    _>:T Ch~mvk C! Uhdfuh" ^dkuwymhaf~3 Wmf Yhnofwkebf YN"LFFF ^yfnwuvd" Cka 59;;!