Method for offline detecting private data leakage of Android application program

Abstract

The invention discloses a method for offline detecting private data leakage of an Android application program. The method comprises the following steps that private data are defined; an Android system based on dynamic dirty point detection is customized, and corresponding dirty point labels are added to the private data of different types; an APK to be detected in user side equipment is guided into a computer; the system is operated on a simulator, and the application program in the APK to be detected is installed and operated; controls in the application program are automatically traversed and clicked by automatically testing scripts, corresponding behaviors are triggered, and the dangerous behavior of the detected application program are recorded; after traversal is finished, the private data leakage detection report of the detected APK is generated. The problems that the private data leakage can only be reminded in real time, a record detection result is not generated, and virtual detection and leak detection occur easily are solved, and meanwhile the problems that an existing detection scheme is low in test efficiency and poor in practicality, the real private data leakage can be caused, and the risk is large are solved.

Description

technical field [0001] The invention relates to an offline detection method for privacy data leakage of an Android application program, belonging to the field of information security. Background technique [0002] Android is a mainstream mobile operating system. With the popularity of Android mobile smart terminals, more and more researchers are studying the Android system. Due to the openness of the source code of the Android platform, its security issues have become an important topic in the field of information security research. The terminal poses a serious security threat. Common malicious behaviors include: consumption behavior, privacy theft behavior, sabotage behavior, advertising behavior, backdoor behavior, etc. The privacy theft behavior refers to the leakage of user sensitive data without the user's permission, which affects the user's personal privacy. posed a great threat. [0003] There are two detection methods for the above-mentioned malicious behaviors: s...

AI Technical Summary

Problems solved by technology

[0008] Purpose of the invention: In order to overcome the deficiencies in the prior art, the present invention provides an offline detection method for privacy data leakage of Android applications, which solves the problem that existing detection schemes can only provide real-time reminders of privacy data leakage, and do not record detection results. It is easy to cause the problem of false detection and missed detection, and at the same time solve the problem of low test efficiency and poor practicability of the existing detection scheme, which will cause real private data leakage and high risk

Images