基于Dalvik指令的Android应用检测方法

Android malware detection based on Dalvik instructions

为提高Android移动平台的安全性,提出一种基于Dalvik指令的静态检测方法,通过分析应用程序的虚拟机代码,找出敏感信息的数据流,包括跟踪敏感信息、函数的调用,从而判断出该应用程序是否有恶意行为。用上述方法建立系统模型来验证其有效性,最终实验结果表明此方法既避免了检测方法的滞后性,又能有效的检测出恶意软件。

In order to improve the security of the Android platform, a method using Dalvik instructions is proposed. Through analyzing Dalvik instructions of the Android software, the data flow of sensitive information can be described, including the tracking of sensitive variables and call functions. Finally, the current software will be tested whether it has malicious behaviors. A system model has been made to validate the method, and the experimental results show that this method can effectively detect malware in real time.