Method for detecting safety of user login interface of Android software

Abstract

The invention relates to a method for detecting the safety of a user login interface of Android software. The method comprises the steps of firstly, analyzing an apk (Android Package) of the Android software, and locating related codes of a login page by using a feature matching method; then, abstracting a user login behavior into three stages of login pre-processing, data package transmission and login post-processing, establishing a detecting model, and carrying out safety testing on key nodes which easily cause a safety problem; finally, judging nodes having the safety problem according to an execution situation of the codes and a feedback situation of a server, carrying out safety evaluation, and analyzing the existing safety problem. According to the method disclosed by the invention, the detection is carried out aiming at the safety of the login page of the Android software, covered detection points are multiple, and the detection efficiency and the detection accuracy are high.

Description

technical field [0001] The invention relates to the field of mobile terminal application security, and more particularly relates to a method for detecting the security of a login interface on Android software. Background technique [0002] At present, with the increasing popularity of mobile terminals and mobile operating systems, the number of mobile terminal applications is growing explosively. However, the security problems of mobile applications are also becoming more and more serious. Sensitive data leakage incidents such as password accounts on mobile terminal applications Occurs from time to time, which poses a great threat to the property and privacy security of users. The Android platform is currently the most popular smart mobile terminal platform, and the applications developed for the Android system account for the majority. Therefore, the security of Android software is very important to the safe development of the mobile Internet and the privacy security of mob...

AI Technical Summary

Problems solved by technology

However, even a simple login mechanism will involve many security issues. Once the developer does not consider it comprehensively, it may cause serious losses to users.

[0004] The traditional Android application detection method is to conduct a holistic detection of the apk file (Android software installation package), and its speed and efficiency will be affected by problems such as wide coverage and large detection tasks.

Images