基于自定义安全策略的Android应用细粒度访问控制方法

Android application fine-grained access control based on self-defined security policy

针对Android权限模型存在的访问控制粒度较粗和权限过度授予等问题,该文提出一种基于自定义安全策略的Android应用细粒度访问控制方法。该方法允许用户自定义和描述安全策略,并采用安全控制代码重定向技术,由此可以根据安全策略控制Android应用对敏感系统资源的访问,实现对过度授予权限的过滤。实验结果表明,该方法对不同版本的Android系统具有良好的兼容性,能够灵活有效地控制Android应用对敏感系统资源的访问。

Aiming at the drawbacks of the Android permission model＇s coarse-grained access control and the over-privileged deficiencies,an Android application fine-grained access control method based on the self-defined security policy is proposed. This method applies the security code redirection technology to control the Android application access to the sensitive system resources based on security policies defined and described by users,and remove the over-granted permissions. The experimental results show that the method has good compatibility to different versions of the Android system,and it can limit application access to the sensitive system resources flexibly and effectively.