基于污点传播动态分析的Android安全系统研究

Research on Android security system based on taint propagation dynamic analysis

随着移动互联网的飞速发展,Android系统得到了大量用户和开发人员的青睐。针对Android系统的恶意软件层出不穷,由此引发的危害也越来越严重。目前针对Android系统应用程序的检测多采用静态分析技术,通过分析代码发现其恶意行为,因此准确度并不是很高,而且对于新的恶意软件变种的检测存在较多问题,而动态分析技术恰好可以弥补这一不足。基于污点传播的动态分析技术,在应用程序运行时监测其行为并记录相关信息进行分析,确定其是否具有恶意软件性质。不仅对系统运行负载较小,也便于系统移植进行多平台的开发测试。

With the rapid development of mobile Internet, the Android system is favored by a large number of users and de- velopers. The emerging malicious software against Android system had brought serious harm. The application program detection for Android system adopts the static analysis technology to find the malicious behavior by means of code analysis, so the detec- tion accuracy is low. Since the detection of new malware variants has many problems, the dynamic analysis technology can make up its shortages exactly. The dynamic analysis technology based on taint spread is used to monitor the behavior while application program running and record the related information for analysis, so as to determine whether the application program has the pro- perty of malicious software. The technology can reduce system operating load, and is convenient for system transplantation to per- form the multi-platform development and testing.