Security vulnerabilities of applications for Android operating system

Android sustav i aplikacije namijenjene za isti su zbog široke rasprostranjenosti i podataka kojima raspolažu česta meta napadača. Cilj svakog napada je pronaći ranjivost aplikacije koja se može zlonamjerno iskoristiti. Temeljni korak prevencije od napada je pisanje sigurnog koda koji neće sadržavati ranjivosti. Cilj ovog rada je upoznati se s mogućim ranjivostima aplikacija i načinima na koje ih napadač može iskoristiti. Analiza je provedena na aplikaciji koja sadrži namjerno umetnute ranjivosti, a ranjivosti su otkrivene statičkom i dinamičkom analizom aplikacije. Na kraju je testirano koje se od pronađenih ranjivosti mogu, odnosno ne mogu, pronaći strojnim putem.Android operating system and Android applications are often target for malware attacks due to their wide distribution and valuable data they have access to. Attacker searches for application vulnerabilities and after finding a vulnerability, the next step is exploitation. The best defense against these attacks is to develop secure code that will not contain vulnerabilities. The goal of this final thesis is to educate about possible application vulnerabilities and the ways in which an attacker can exploit them. The analysis of possible vulnerabilities is performed on an application that contains intentionally inserted vulnerabilities. Vulnerabilities are detected by performing static and dynamic application analysis. Finally, it is tested which of the vulnerabilities could be detected by using automated tools