Safety risk detecting method and device for Android application program

Abstract

The invention provides a safety risk detecting method and device for an Android application program and relates to the technical field of Android application detecting. The method comprises the steps that decompiling is carried out on the Android application program to be detected to obtain a program source file, and the program source file is analyzed and processed to obtain application programming interface call information of the Android application program to be detected; according to the application programming interface call information of the Android application program to be detected, operating authorization information of operation needing to be carried out on a terminal by the Android application program to be detected is obtained; according to the operating authorization information, a hierarchical structure is set up; first weight sets of all criterion items in a criterion layer relative to a target layer are determined, and second weight sets of all subsidiary criterion items in a subsidiary criterion layer relative to the criterion items which the subsidiary criterion items belong to are determined; fuzzy relation matrixes corresponding to all the criterion items are determined; according to the first weight sets, the second weight sets and the fuzzy relation matrixes, safety risk grades are determined. The method can solve the problem that a risk detecting mode of a current application program is not accurate.

Description

technical field [0001] The invention relates to the technical field of Android application detection, in particular to a security risk detection method and device for Android application programs. Background technique [0002] Mobile devices such as smartphones and tablets have grown rapidly in recent years. And the current Android (abbreviated Android) platform has occupied most of the share of the smart mobile terminal market. Therefore, along with the development of the Android platform, a large number of Android applications are also increasing. Due to the openness of the Android system, users can not only download and install applications from Google's official market, but also download and install applications from any third-party market or even websites and forums. But when users install and use these application programs, they do not know the security level of these application programs. Android applications usually have multiple permission requests, and it is dif...

AI Technical Summary

Problems solved by technology

[0005] Embodiments of the present invention provide a security risk detection method and device for an Android application to solve the problem that the current security risk detection method for an Android application only considers the malicious behavior API in the application and does not fully reflect the needs of the application. permission request, so the current application risk detection method is inaccurate

Images