Android应用程序权限组重要性分析

Importance Analysis for Android Permission Groups

Android系统运行时权限机制提出了权限组概念,但是应用市场上缺乏描述应用程序权限的信息,用户无法了解应用程序中权限组的重要性及其设置策略。针对这些问题,本文提出一种权限组重要性分析方法,通过逆向工程技术分析应用程序,利用排序算法计算程序中权限组的重要性评分,根据重要性评分确定应用程序中权限组的使用情况和设置策略,借助机器学习方法对分析方法进行测试与评估。实验结果表明,本文方法可以详细分析应用程序中权限组的重要程度,并推荐合适的权限组设置策略。

The runtime permission model of Android system proposes a new concept of permission groups. As application markets lacking description information of permissions,users are unable to know the importance of permission groups in the application and its setups. Aiming at this problem,this paper proposes an importance analysis method for permission groups,which analyzes an application through reverse engineering,ranks permission groups with the help of ranking algorithm,determines the usages and setups of permission groups in the application,and uses machine learning to test and evaluate this analysis method. The experimental results show that the proposed method can analyze importance of permission groups in the application and recommend appropriate setups for permission groups.