Android re-packed application detection method based on application programming interface

A technology of application programs and programming interfaces, which is applied in the field of detection and repackaging applications, can solve problems such as failure to achieve high efficiency and accuracy

Active Publication Date: 2013-12-25
PEKING UNIV
View PDF2 Cites 33 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

But this is not done

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Android re-packed application detection method based on application programming interface
  • Android re-packed application detection method based on application programming interface
  • Android re-packed application detection method based on application programming interface

Examples

Experimental program
Comparison scheme
Effect test

specific Embodiment approach

[0048] A. When preprocessing the application file, perform the following operations (such as figure 2 shown):

[0049] A1. Use existing tools, such as keytool (JDK (Java Development Kit) development component tool), to extract the author's signature content from the corresponding apk file;

[0050] A2. Use existing tools, such as apktool (https: / / code.google.com / apktool / ), to extract and convert the compressed binary code in the apk package into a smali code file.

[0051] B. When processing the smali file to form a feature vector, perform the following operations (such as image 3 shown):

[0052] B1. Process the smali code file obtained in step A2, read the content of the smali file, use regular expressions to match, convert the application into an interface function and separate other information, and make statistics and summaries in folders.

[0053] B2. Transform the API data obtained in step B1 into Euclidean space feature vectors that are easy for program recognitio...

Embodiment 1

[0065] Assume that there are 1000 Android apk installation programs, and it is necessary to find software with a repackaging relationship among them. The file names are 1.apk, 2.apk until 1000.apk.

[0066] A. The process of pretreatment includes the following steps (such as Image 6 shown):

[0067] A1. For any apk file, such as 1.apk, use the open source keytool tool to obtain the author's signature information file; record these signatures as a list for use in step D3.

[0068] A2. For any apk file, such as 1.apk, use the open source apktool tool to decompress the apk. There is a smali folder in the decompressed package, and there is a corresponding smali code file in the folder.

[0069] B. The process of generating feature vectors, including the following steps (such as Figure 7 shown):

[0070] B1. For any apk file, such as 1.apk, process the smali code file obtained by preprocessing, read the content in smali, obtain information about application programming interf...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to an android re-packed application detection method based on an application programming interface. The android re-packed application detection method based on the application programming interface comprises the following steps of firstly processing an application program file to obtain a smali code file; for each file folder, extracting the use situation of the application programming interface of android from smali codes, and counting frequency information; clustering through mutual comparison of the file folders, and utilizing the file folders with high similarity degree and more repetition numbers as a third party library; after removing the interference of the third party library, by utilizing the application program file as the unit, clustering program files with the high similarity degree; finally combining signing information of a writer, judging whether the re-package relationship exists in the application programs or not. By utilizing the technical scheme of the method provided by the invention, in application with a large-scale application market stage, re-packed applications can be automatically detected; the efficiency and the accuracy are very high.

Description

technical field [0001] The present invention relates to a method for detecting repackaged applications based on application programming interfaces, in particular to a method for filtering third-party libraries and detecting repackaged applications under the Android platform by using the frequency of use of key application programming interfaces in application codes method. Background technique [0002] Mobile devices such as smartphones and tablets have grown rapidly in recent years. The Android platform occupies a major share of the smart mobile market. According to statistics, more than 1.3 million mobile devices equipped with the Android system are activated and used every day. With the popularity and popularity of mobile devices, a large number of mobile applications have emerged. As of February 2013, there are more than 800,000 Android mobile applications in Google's official market. These mobile applications not only enhance the functionality of mobile devices, but ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F17/30
Inventor 郭耀马子昂王浩宇陈向群
Owner PEKING UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap