【摘要】：隱私泄露是當(dāng)前Android安全中最為重要的問題之一,目前檢測(cè)隱私泄露的最主要方法是污點(diǎn)分析.Android靜態(tài)污點(diǎn)分析技術(shù)憑借其代碼覆蓋率高、漏報(bào)率低的特點(diǎn)而被廣泛應(yīng)用在Android應(yīng)用隱私泄露的檢測(cè)上.然而,現(xiàn)有的靜態(tài)污點(diǎn)分析工具卻不能對(duì)Android動(dòng)態(tài)加載和反射機(jī)制進(jìn)行有效污點(diǎn)分析.鑒于當(dāng)前Android動(dòng)態(tài)加載和反射機(jī)制被越來越廣泛地應(yīng)用的現(xiàn)狀,對(duì)如何使Android靜態(tài)污點(diǎn)分析工具有效地處理Android應(yīng)用的動(dòng)態(tài)加載和反射機(jī)制的問題進(jìn)行了研究.對(duì)Android源碼進(jìn)行了修改,使Android系統(tǒng)能夠?qū)ndroid應(yīng)用實(shí)際運(yùn)行中加載的dex文件和反射調(diào)用信息進(jìn)行實(shí)時(shí)存儲(chǔ),并利用這些信息對(duì)Android靜態(tài)污點(diǎn)分析過程進(jìn)行引導(dǎo).以當(dāng)前領(lǐng)先的靜態(tài)污點(diǎn)分析工具FlowDroid為基礎(chǔ),對(duì)其進(jìn)行了改進(jìn),提出了使用非反射調(diào)用語句替換反射調(diào)用語句的策略,實(shí)現(xiàn)了一個(gè)能夠?qū)ndroid動(dòng)態(tài)加載和反射機(jī)制進(jìn)行有效污點(diǎn)分析的工具——DyLoadDroid,并通過實(shí)驗(yàn)驗(yàn)證了其在處理Android動(dòng)態(tài)加載和反射機(jī)制的污點(diǎn)分析問題上的有效性.
[Abstract]:Privacy disclosure is one of the most important issues in the current Android security. At present, the most important method to detect privacy disclosure is stain analysis. Because of the low false alarm rate, it has been widely used in the detection of privacy leaks in Android applications. However, the existing static stain analysis tools can not be used to analyze the dynamic loading and reflection mechanism of Android. In view of the current situation that the dynamic loading and reflection mechanism of Android is more and more widely used, this paper studies how to make Android static stain analysis tool deal with the dynamic loading and reflection mechanism of Android application effectively. The Android source code is modified so that the Android system can store the dex file and reflection call information loaded in the actual operation of the Android application in real time, and use these information to guide the Android static stain analysis process. Based on the current leading static stain analysis tool FlowDroid, this paper improves it, and puts forward a strategy of replacing reflection call statement with non-reflection call statement. In this paper, a tool, DyLoadDroid, which can analyze the dynamic loading and reflection mechanism of Android, is implemented and its effectiveness in dealing with the problem of dynamic loading and reflection mechanism of Android is verified by experiments.
【作者單位】： 綜合業(yè)務(wù)網(wǎng)理論及關(guān)鍵技術(shù)國家重點(diǎn)實(shí)驗(yàn)室(西安電子科技大學(xué));中國科學(xué)院大學(xué)國家計(jì)算機(jī)網(wǎng)絡(luò)入侵防范中心;信息安全國家重點(diǎn)實(shí)驗(yàn)室(中國科學(xué)院信息工程研究所);
【基金】：國家自然科學(xué)基金項(xiàng)目(61572460,61272481,61303239) 信息安全國家重點(diǎn)實(shí)驗(yàn)室開放課題(2015-MS-06,2015-MS-04)~~
【分類號(hào)】：TP309;TP316

【相似文獻(xiàn)】

相關(guān)期刊論文 前10條

1 林耕宇;;觀摩50名Google Android程序開發(fā)競賽作品[J];電子與電腦;2008年08期

2 樹子;;Android中文版不完全體驗(yàn)[J];互聯(lián)網(wǎng)天地;2009年04期

3 Jason Whitmire;;產(chǎn)業(yè)軟件專家如何協(xié)助解決Android的分裂困境[J];電子與電腦;2010年02期

4 蔣彬;;10款A(yù)ndroid手機(jī)必備應(yīng)用——Android操作系下的軟件評(píng)測(cè)[J];微電腦世界;2010年04期

5 ;PCWorld Windows Phone 7挑戰(zhàn)Android 毅然崛起的AndroidⅠ洗心革面的Windows Phone 7[J];微電腦世界;2010年08期

6 韓青;;Android平臺(tái)發(fā)展的動(dòng)力與挑戰(zhàn)[J];中國電子商情(基礎(chǔ)電子);2010年09期

7 方智勇;;Android手機(jī)這樣用[J];電腦迷;2010年15期

8 缺少浪漫;;Android的另一面[J];電腦迷;2010年13期

9 ;ZTE and Three Release Android ，

本文編號(hào)：2450983