Android application vulnerability detection method and Android application vulnerability detection system

Abstract

The invention provides an Android application vulnerability detection method which comprises the following steps: 1, judging whether a privacy leakage vulnerability possibly exists or not by virtue of analyzing Content Provider interface characteristics of a to-be-detected Android application; 2, if the privacy leakage vulnerability possibly exists, performing an SQL (Structured Query Lanaguge) injection vulnerability test and a path traversal vulnerability test on a public accessible URI (Uniform Resource Identifier) of the to-be-detected Android application which possibly has the privacy leakage vulnerability by virtue of monitoring a related API (Application Program Interface) function in an Android system, and then detecting passive data leakage safety risks. The invention also provides an Android application vulnerability detection system. The method and the system can be used for rapidly discovering privacy leakage and data pollution vulnerabilities possibly existing in the Android application, avoiding misdeclaration, and providing a powerful support for discovering the privacy leakage and data pollution vulnerabilities in the Android application on a large scale.

Description

technical field [0001] The invention relates to a computer program loophole detection technology, in particular to an application loophole detection method and system on an Android (Android operating system). Background technique [0002] At present, with the increasing popularity of the Internet and smart phones in human society, mobile security issues and security risks are becoming more and more serious. Malicious programs such as viruses and Trojan horses targeting smartphones are developing rapidly, and the incidents of implanting malicious codes on mobile terminals for cybercrime are on the rise, and users of mobile terminals are facing unprecedented security risks. The Android platform is currently the most popular smart mobile terminal platform, and the security risks in it attract the most attention. [0003] Content Provider is a set of structured local data components (usually in the form of SQLite database) encapsulated in the Android operating system, and then ...

AI Technical Summary

Problems solved by technology

The static taint analysis and data flow analysis techniques adopted by the existing static analysis methods cannot consider the dynamic feature of polymorphism in Java, and will also increase the false positive rate of vulnerability detection to a certain extent.

In addition, the suspected vulnerabilities detected by the existing static analysis technology cannot really achieve effective attacks and need to be further verified by manual methods. Faced with a large number of Android applications, manual verification is time-consuming and labor-intensive

Images