Android application program packing detection method

A technology of application programs and detection methods, applied in the direction of software testing/debugging, etc., can solve problems such as difficult detection, achieve great commercial value, promote mobile application security, APK reinforcement, and promote the effect of risk assessment market

Active Publication Date: 2015-11-18
BEIJING ANPRO INFORMATION TECH
View PDF2 Cites 26 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, it is still difficult to detect whether the protective effect of the shelling treatment of these reinforced products is effective.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Android application program packing detection method
  • Android application program packing detection method
  • Android application program packing detection method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0086] Assume that in an Android application detection system written in Java language, the scheme of the present invention is used to detect packed APK applications to detect whether the packed APK applications are effective.

[0087] Set the name of the packed application as MyApplication. The name of the Android application detection system is AnproAss. The specific steps of the detection are as follows (such as image 3 ):

[0088] 1) Install the application detection system AnproAss in the simulator MyTest;

[0089] 2) AnproAss hooks the intdvmDexFileOpenFromFd(intfd,DvmDex**ppDvmDex) function in the system / system / lib / libdvm.so;

[0090] 3) Simulator MyTest installs MyApplication;

[0091] 4) Run the unpacking processing program (unpacking tool), mainly processing the DvmDex data structure parameter that Hook function imports. At this time, the unpacking program added by the packing software has unpacked the packed classes.dex file, so the DvmDex data structure passe...

Embodiment 2

[0096]Assume that in an Android application detection system written in Java language, the invention is used to detect the packed APK application to detect whether the packed APK application is effective, and the name of the packed application is set to MyApplication. The name of the Android application detection system is AnproAss. The specific steps are as follows (such as Figure 4 ):

[0097] 1) Install the application detection system AnproAss in the simulator MyTest;

[0098] 2) AnproAss hooks the intdvmDexFileOpenPartial(constvoid*addr,intlen,DvmDex**ppDvmDex) function in the system / system / lib / libdvm.so;

[0099] 3) Simulator MyTest installs MyApplication;

[0100] 4) Run the unpacking processing program (unpacking tool), mainly processing the DvmDex data structure parameter that Hook function imports. At this time, the unpacking program added by the packing software has unpacked the packed classes.dex file, so the DvmDex data structure passed in at this time contai...

Embodiment 3

[0107] Assume that in an Android application detection system written in Java language, the invention is used to detect the packed APK application to detect whether the packed APK application is effective, and the name of the packed application is set to MyApplication. The name of the Android application detection system is AnproAss. The specific steps are as follows (such as Figure 5 ):

[0108] 1) Install the application detection system AnproAss in the simulator MyTest;

[0109] 2) Install the packed Android application MyApplication;

[0110] 3) Dalvik loads the classes.dex file of the packed MyApplication;

[0111] 4) Dalvik did not reload the dex or odex file;

[0112] 5) The classes.dex file is not obtained;

[0113] 6) The scheme of the present invention cannot deshell the shell of this method.

[0114] After packing through the corresponding packing tool, the unpacking method of the present invention can be used to obtain the source code and further analyze the...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses an Android application program packing detection method for detecting whether the packing protection effect of a packed APK is really achieved with an Android application program unpacking method. The method comprises the steps of: installing a Hook tool in a simulator and configuring the environment of the Hook tool; installing a packed APK file; unpacking two system functions dvmDexFileOpenFromFd and dvmDexFileOpenPartial by the Hook tool to obtain a classes.dex file; comparing the classes.dex file with an unpacked classes.dex file, and detecting whether the unpacking is successful; and recovering the classes.dex file. The method can verify the packing effect of certain applications packed with an existing APK reinforcement tool, also is a novel method for detecting the security of the APK file, has a very good promotion effect on industrial APK reinforcement and risk evaluation markets, and has a very great promotion effect on the security aspect of mobile applications in addition to very high commercial values.

Description

technical field [0001] The present invention relates to a method for unpacking an Android application program, and in particular to a detection method for an Android application program, that is, through a method for unpacking an Android application program based on JNIHook, the APK (abbreviation for AndroidPackage) after the packaging process is detected , that is, the Android application installation package) has really achieved the effect of packing protection. Background technique [0002] With the hot sales of smartphones, mobile Internet access is becoming more and more popular, and the outbreak of the mobile Internet era has driven smartphones to become more versatile. With the explosive growth of mobile phone users and the convenience of mobile Internet access, mobile phone security risks are becoming more and more serious. The more, the more prominent the problem. According to the "28th Statistical Report on China's Internet Development Status" released by China In...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F11/36
Inventor 张涛李浩宁戈孟正
Owner BEIJING ANPRO INFORMATION TECH
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap