Android平台下木马检测技术的研究与实现

Research and Realization of Trojan Horse Detection Technology under Android Platform

针对目前Android平台下木马侵扰问题,从概念、传播途径、恶意行为三个方面简要介绍木马,然后分析了特征码检测、启发式检测、行为检测、完整性检测的原理。通过对比这些主流木马检测技术的优缺点,提出了特征码检测与权限检测相结合的检测方案,设计并实现了Android平台下的木马检测系统。最后,将该系统与静态分析工具Androguard进行实验对比,证明了该系统能有效提高木马检测率,达到了设计目的。

Aiming at the problem of Trojan Horse intrusion under Android platform at present, this paper first introduces the trojan horse briefly from three aspects of concept,communication ways and malicious behavior,then analyzes the principles of signature detection,heuristic detection,behavior detection and integrity detection.By comparing the advantages and disadvantages of these mainstream trojan horse detection technologies, a detection scheme combining signature detection and authority detection is proposed,and the trojan horse detection system is designed and implemented.Finally,compared with the static analysis tool Androguard, the system can improve the detection efficiency of the trojan horse and achieve the design goal.