期刊文献+

一种面向普通用户的Android APP安全性动态分析方法研究 被引量:9

Research on the Security of APP Android Security Dynamic Analysis Method for Average Users
下载PDF
导出
摘要 文章设计了一种面向普通用户的Android APP安全性动态分析方法并实现了原型系统。首先,借助于具有API调用监测功能的扩展Dalvik虚拟机对Android系统模拟器AVD进行定制,实现Android APP运行行为的动态分析;然后,使用adb和Monkey工具,在通用服务平台上,完成对运行在AVD中的APP程序用户行为模拟测试;最后,基于Web方式,实现了检测服务的用户访问接口。 In this paper, a dynamic Android APP security evaluation method for average users is presented and a prototype based on this method is implemented. Firstly, a tailored Android system emulator AVD is implemented through introducing API calls monitoring codes in the Dalvik virtual machine of AVD. Secondly, with Python, we implemented an AVD control Script program. This program may take advantage of adb instructions and Monkey tool to load APP being tested on AVD and record test results. Finally, we implemented APP test service access interface in Web form.
出处 《信息网络安全》 2015年第9期1-5,共5页 Netinfo Security
基金 中科院信息化专项[Y3X0021103]
关键词 AndroidAPP 动态分析 定制AVD Android APP dynamic analysis tailored AVD
  • 相关文献

参考文献10

  • 1Laurence, Goasduff, Janessa, RAvera. Gartner Says Smartphone Sales Surpassed One Billion Units in 2014[EB/OL]. http://www.gartner.com/ newsroom/id/2996817,2015-03-03.
  • 2Ariel. App Stores Growth Accelerates in 2014[EB/OL]. http://blog. appfigures.com/app-stores-growth-accelerates-in-2014/,2015-01-13.
  • 3包佳敏,胡爱群.Android系统文件监听技术的研究[J].信息网络安全,2014(3):46-51. 被引量:8
  • 4高岳,胡爱群.基于权限分析的Android隐私数据泄露动态检测方法[J].信息网络安全,2014(2):27-31. 被引量:13
  • 5S. Arzt, Rasthofer, S., Fritz, C., Bodden, E., Barte, A., Klein, J., Le Traon, Y., Octeau, D., and McDaniel, P., "FlowDroid: Precise Context, Flow, Field, Object-sensitive and Lifecycle-aware Taint Analysis for Android APPs[C]//Proceedings of the 35th ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI 2014), 2014.
  • 6Iker Burguera, Urko Zurutuza, and Simin Nadjm-Tehrani. Crowdroid: behavior-based malware detection system for Android[C]// Proceedings of the 1st ACM workshop on Security and privacy in smartphones and mobile devices, pages 15-26,2011.
  • 7Giovanni Russello, Arturo Bias Jimenez ,Habib Naderi. FireDroid: hardening security in almost-stock Android [C]//ACSAC 2013: 319- 328.
  • 8张金鑫,杨晓辉.基于权限分析的Android应用程序检测系统[J].信息网络安全,2014(7):30-34. 被引量:14
  • 9William Enck, Peter Gilbert, Jaeyeon Jung, Patrick McDaniel, Byung-Gon Chun, Landon P Cox, and Anmol N Sheth. Taintdroid: an informationflow tracking system for realtime privacy monitoring on smartphones [C]//Proceedings of the 9th USENIX conference on Operatin systems design and implementation, pages 1-6, 2010.
  • 10郝增帅,郭荣华,文伟平,孟正.基于特征分析和行为监控的未知木马检测系统研究与实现[J].信息网络安全,2015(2):57-65. 被引量:15

二级参考文献48

共引文献41

同被引文献48

  • 1王松涛,吴灏.Linux下基于可执行路径分析的内核rootkit检测技术研究[J].计算机工程与应用,2005,41(11):121-123. 被引量:8
  • 2郑光明,胡博.基于MD5的文件完整性检测软件设计[J].湖南理工学院学报(自然科学版),2007,20(1):35-38. 被引量:8
  • 3WebView-AndroidDevelopers[EB/OL].http://developer.android. com/reference/android/webkit/webview.html, 2015-06-03.
  • 4Jing Yu, Toshihiro, Yamauchi. Access Control to Prevent Attacks Exploiting Vulnerabilities of WebView in Android OS[C]//2013 IEEE International Conference on High Performance Computing and Communications & 2013 IEEE International Conference on Embedded and Ubiquitous Computing, 2013.
  • 5Pinku Hazarika, Rahul Raj CP, Seshubabu Tolety. Recommendations for Webview Based Mobile Applications on Android[C]//2014 IEEE International Conference on Advanced Communication Control and Computing Technologies (ICACCCT), 2014.
  • 6Tongbo Luo, Hao Hao, Wenliang Du. Attacks on WebView in the Android System[C]//Proceedings of the 27th Annual Computer Security Application Confbrence. ACM, 2011 : 343-352.
  • 7Hyderabad, Andhra. Cross-site Scripting Attacks on Android WebView[C]//IJCSN International Journal of Computer Science and Network, 2013.
  • 8Jingzhu Wu, Yanhui Guo, Guoai Xu. Enhance Android Applications Based on Anti-Reverse Scheme[C]//Proceedings of IEEE CCIS2012, 2012.
  • 9Tang Jiutao, Lin Guoyuan. Research of Software Protection[C]// International Conference on Educational and Network Technology(ICENT 2010), 2010.
  • 10ZHOU Yajin, JIANG Xuxian.Dissecting Android Malware: Characterization and Evolution[C]//IEEE.Proceedings of the 33rd IEEE Symposium on Security and Privacy,May 20-23,2012, Oakland, USA. Piscataway, NJ, USA: IEEE,2012:221-239.

引证文献9

二级引证文献32

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部