Security detection method for android application file

Abstract

The invention discloses a security detection method for an android application file, and mainly solves the problem of privacy leakage vulnerability detection capability shortage of an existing android application file. The method is implemented by the steps of 1, converting a Dalvik byte code file in the android application file into a Jimple language; 2, extracting input and output functions related to sensitive data by classification from an android system file, classifying the input and output functions, and marking a source and an output; 3, generating a virtual Main function in the Jimple language and generating an interprocedural control flow diagram according to the function; 4, establishing a taint spread rule; 5, generating a taint access path according to the interprocedural control flow diagram; and 6, according to the marked source and output, executing the taint spread rule in the taint access path to find out a data leakage path. According to the method, the missing and false reporting of privacy leakage vulnerabilities is reduced and the security protection performance is improved, so that the method can be used for detecting the android application file.

Description

technical field [0001] The invention relates to the field of computer security, and further relates to a detection method, which can be used for security detection of application programs on the Android platform, and avoids leakage of private data existing in the application programs. Background technique [0002] The Android system is the current mainstream mobile phone operating system. The Android system is based on the Linux operating system, with the Linux2.6 kernel as the underlying architecture. Android system includes Android kernel, Android system library, Android application framework layer and application layer. Among them, the Android kernel system, as the abstract layer of software and hardware, encapsulates memory management, process management, network protocol stack and driver model, and provides services for upper-layer applications through underlying driver modules such as display drivers, USB drivers, camera drivers, and Bluetooth drivers. . The main fun...

AI Technical Summary

Problems solved by technology

Due to the characteristics of multiple entry points and callback functions in Android applications, it is difficult to perform taint analysis on Android application files, and false negatives and false positives often occur during the taint analysis process, which affects the accuracy of the analysis.

Images