基于gdb的Android软件漏洞挖掘系统

Android Software Vulnerabilities Mining System Based on gdb

传统的漏洞挖掘技术一般适用于x86平台,且是面向PC的。随着Android手机的普及,需要有针对其上运行软件的漏洞挖掘技术。针对当前Android软件市场审核宽松以及该领域研究相对较少等方面存在的一些问题,设计并实现了一种基于gdb的Android软件漏洞挖掘系统。系统采用基于信息流追踪的污点分析技术,从污点标记、污点传播和污点检测三个方面进行设计,并通过指令模拟执行提高分析覆盖率。当系统发现可疑漏洞时,把结果通知给用户,并能对漏洞做出全面的分析。通过对Android软件的测试,发现了部分软件中的缓冲区溢出漏洞,证实了系统的有效性。

The traditional vulnerability mining techniques are generally applicable to x86 platform, and intent to the PC. With the popularity of Android phones, the vulnerability mining technology running on it is needed. Because of the problems of the current accommodative Android software market audit and relatively small research in this area, a gdb-based Android software vulnerabilities mining system is designed and implemented. The system adopts taint analysis techniques based on tracking the flow of information, which is designed from taint marking, taint transmission and taint detection, and improves analysis coverage through instruction simulation. The result is notified to the user and the system can make a comprehensive analysis of vulnerability when the system finds the suspicious loopholes. By the test for Android software, some buffer overflow vulnerabilities in software is found, which proves the effectiveness of the system.