Android应用安全审核认证系统的设计研究

Design and Research of Android Application Security Audit and Certification System

由于APK应用具有开放性,使其很容易在反编译和重新打包过程中植入第三方代码,由此为Android系统带来了严重的安全问题。为解决APK应用内容恶意篡改问题,对APK建立安全可信的发布和运行环境,在服务端和客户端分别建立安全审核和安全认证模块。系统实现了对APK应用的签名和验证功能,为解决APK应用的内容安全问题提供了解决方案。

Due to the open nature of APK applications,it is easy to embed third-party code during decompilation and repackaging,which poses serious security issues for the Android system.In order to solve the problem of malicious tampering of APK application contents,a safe and reliable release and operating environment for APKs is established,and security auditing and security authentication modules are respectively established on the server and the client.The system achieves the APK application signature and verification capabilities,which provide a solution to enhance content security of the APK application.