基于Android应用程序的第三方类库检测系统

Detection of third-party libraries in Android apps

随着Android系统的不断升级与其应用领域的扩张,基于Android平台的第三方类库的数量也越来越多,某些类库带有严重的安全漏洞,导致集成该类库的app也有了各种安全隐患.因此,基于Android平台的第三方类库的检测,有着重要意义.本文在前人研究工作的基础上,通过对第三方类库的源码进行合理的特征选取,然后进行哈希运算,将结果作为特征值存储在特征库中,最终通过特征匹配的方法检测出对于给定的Android应用程序都使用了哪些第三方类库.最后通过实验分析得出,该方法能够有效的检测出app中的第三方类库.

With the Android system continues to upgrade and its application areas of expansion,the number of third-party libraries is more and more. Many third-party libraries have vulnerabilities that bring security risks to the apps. So,there has a significance to detect the third-party libraries. Before our work,there were some solutions has been proposed by other researchers,but the methods they proposed has some weak points,such as some methods unable to deal with obfuscation. For the above reasons,we propose a solution which can deal with these problems. At first,we select some valid features from the source code of a third-party library,and then we get the hashing features of every library in order to have a better efficiency when we do the last step. Through experimental analysis,our solution can detect third-party libraries in an app within seconds.