摘要
针对Android权限模型存在的访问控制粒度较粗和权限过度授予等问题,该文提出一种基于自定义安全策略的Android应用细粒度访问控制方法。该方法允许用户自定义和描述安全策略,并采用安全控制代码重定向技术,由此可以根据安全策略控制Android应用对敏感系统资源的访问,实现对过度授予权限的过滤。实验结果表明,该方法对不同版本的Android系统具有良好的兼容性,能够灵活有效地控制Android应用对敏感系统资源的访问。
Aiming at the drawbacks of the Android permission model's coarse-grained access control and the over-privileged deficiencies,an Android application fine-grained access control method based on the self-defined security policy is proposed. This method applies the security code redirection technology to control the Android application access to the sensitive system resources based on security policies defined and described by users,and remove the over-granted permissions. The experimental results show that the method has good compatibility to different versions of the Android system,and it can limit application access to the sensitive system resources flexibly and effectively.
出处
《南京理工大学学报》
EI
CAS
CSCD
北大核心
2016年第2期142-148,共7页
Journal of Nanjing University of Science and Technology
基金
国家自然科学基金(61202352)
江苏省自然科学基金(BK20140797)
关键词
访问控制
安全策略
代码重定向
access control
security policy
code redirection