基于Android系统的隐私保护技术综述

Survey of privacy protection techniques based on Android

智能手机用户的隐私泄露问题日趋严重。为此研究了Android的系统框架及安全机制,包括沙盒、应用签名、权限机制。着重研究了Android系统中间件层的安全增强方法,列举了系统易受攻击的种类,总结了现有的隐私保护技术,包括应用程序安装时权限机制的扩展,运行时的动态权限监测以及隐私数据的保护。

In recent years, the problem of privacy leak of the smart phone users is getting worse and worse. For this, the system framework of Android and its security mechanisms are introduced, including the sandboxing, application signing, and permission mechanism. Security enhancement in the Android system＇s middleware layer is researched. The types of system that is vulnerable are listed and the existing privacy protection techniques are summed up, including the extension of permissions mechanism during the installation process of an application, run-time monitoring of the dynamic permissions and the protection of privacy data.