基于白名单与主动防御混搭的安卓终端安全应用研究

Research on the security application of Android terminal based on white list and active defense

在安全关注程度极高的安卓终端无线组网模式下,提出了白名单与主动防御混搭的安卓终端安全防御体系.对防御体系架构和技术架构进行了设计和梳理,并对安卓环境下的防御链、杀伤链、管理链进行了研究和分析,提出并实现了以权值为基础的行为分析算法,并在Android 5.x、Android 6.x进行核心算法验证,有效的提高了终端安全性能.

In the Android terminal wireless networking model with high security concern, an Android terminal security defense system is proposed, which is a mixture of white list and active defense. The defense system architecture and technical architec- ture are studied and designed, the defense chain, kill chain and management chain in Android defense environment are ana- lyzed ,the behavior analysis algorithm based on right value are proposed and implemented ,the core algorithm is verified in An- droid 5. x and Android 6. x, and the performance safety of terminal is effectively improved.