Security enhancement method for third-party code of Android application program

Abstract

The invention discloses a security enhancement method for a third-party code of an Android application program. The security enhancement method comprises the steps of: obtaining a call chain relating to user privacy data in an application program process by utilizing system exception stack data; obtaining main information of a call initiator by a system according to call chain information; sending the main information of the call initiator to a system access control evaluation engine by utilizing an inter-process communication mechanism; judging a call source by an evaluation engine according to the main information and a third-party code package list; executing a corresponding user policy according to the call source; performing permission evaluation of the call according to user selection and application program permission; caching an evaluation result; and returning corresponding data according to the evaluation result. The method is capable of realizing the security enhancement of the third-party code of the Android application program with relatively low performance cost on the basis of being compatible with an original application program structure and an original third-party code frame.

Description

technical field [0001] The invention belongs to the field of mobile security and access control, and more specifically relates to a security enhancement method for third-party codes of Android application programs. Background technique [0002] The International Organization for Standardization defines "computer security" as: "Technical and management security protection established and adopted for data processing systems to protect computer hardware and software data from being destroyed, changed and leaked due to accidental and malicious reasons. ". As the main carrier of computing in the mobile Internet era, mobile smart terminals store more private data, including contact information, call records, and geographic location information, which are more prone to security issues, and user privacy data leakage may have disastrous consequences , so its security needs to be given enough attention. [0003] The openness of the Android ecosystem leads to the widespread existence...

AI Technical Summary

Problems solved by technology

The existing solutions can solve the security problems existing in the third-party code framework to a certain extent, but from the perspective of implementation, in order to achieve the purpose of security enhancement, the existing solutions need to change the original application structure Or the original third-party code framework has poor compatibility and is not easy to implement

Images