Android software visualization safety analysis method based on module relations

Abstract

The invention provides an Android software visualization safety analysis method based on module relations.According to the method, module recognition is conducted on Android software source codes according to a standard module model, all Android modules are extracted, then all attributes of individual module are obtained through regulation matching engine analysis, automated module type modeling of Android software is achieved, software behavior is described in the modularized form, meanwhile, user privacy data serve as the core, privacy data and data leakage outlets are recognized, the weakness degree of each module is quantified, visualization description is conducted on possible privacy disclosure behavior of the software, module positions which is attacked by malicious applications possibly and the module calling relation, and visualization display of the software behavior with respect to safety is achieved.Artificial distinguishing of a user and a program analysis method are effectively combined, so that the user has more visualized knowledge about the software behavior related to privacy data, and the purpose of distinguishing safety of an application is achieved.

Description

technical field [0001] The invention relates to the field of network technology and network security, in particular to the security evaluation and analysis of application software in an Android mobile phone system, in particular to a visual security analysis method for Android software based on component relationships. Background technique [0002] With the rapid development of mobile Internet technology, the functions of smart terminals are rapidly increasing, making them gradually replace traditional desktops and become the next-generation computing platform. As the most popular smart terminal system, the Android system has entered important industries such as education, medical care, automobiles, and home furnishing from the initial field of smart phones. Since the Android system allows users to install a variety of rich applications by themselves, the functions of the Android system are constantly being upgraded and expanded. SMS, contacts and other important informatio...

AI Technical Summary

Problems solved by technology

However, due to the complexity and diversity of current software functions, the uneven programming level of developers, and the different usage scenarios, it is inappropriate and easy to mechanically judge whether the software has malicious behavior based on software permissions or the process of private data transmission. cause misjudgment

[0005] In summary, the existing security-related program analysis methods for Android applications mostly use static analysis methods, which require more malware features and have a higher false positive rate.

Images