基于Fuzzy-IBE的Android防恶意代码注入方案

An Android anti-malware injection scheme based on Fuzzy-IBE

为了防范Android恶意代码的注入,提升APK的安全性,抵御对其认证文件的碰撞攻击,基于Fuzzy-IBE设计了一种Android防恶意代码注入方案。该方案利用APK自身的多个资源文件作为APK的属性信息,并将属性进行Hash处理,映射为Fuzzy-IBE的解密私钥,防止了恶意攻击者对APK的注入,同时优化了应用程序的内部结构,减少了应用的体积。实验结果表明,该方案对于防止恶意代码注入是有效的。

In order to prevent the injection of Android malicious code, improve the security of APK and resist the impact of the authentication file, An Android anti-malware injection scheme based on fuzzy-IBE is designed, the scheme uses APK＇s own multiple resource file as APK attribute information, the property is processed by Hash and mapped into Fuzzy-IBE de＇- cryption key for preventing the application of malicious attackers effectively. The internal structure of the application is opti mized, the size of the application is reduced. The experimental results show that the scheme is effective for anti-malware in jection.