Method for detecting privacy leakage across app components

A technology of privacy leakage and detection methods, applied in the field of automatic detection of component sequences based on potential privacy leakage of components, it can solve the problems of privacy leakage, path explosion, and various code discontinuities, and achieves the improvement of detection efficiency and speed. Effect

Inactive Publication Date: 2017-04-19
NORTHWEST UNIV(CN)
View PDF6 Cites 16 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] In view of the problems existing in the above-mentioned prior art, the purpose of the present invention is to provide a detection method for privacy leakage between App components to solve the problem of path explosion and various code discontinuity problems in the prior art, etc.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method for detecting privacy leakage across app components
  • Method for detecting privacy leakage across app components
  • Method for detecting privacy leakage across app components

Examples

Experimental program
Comparison scheme
Effect test

specific example

[0109] Details of privacy leakage between cross-App components: detection found that com.pdswp.su.smartcalendar and com.xkfop.xhuioa can cooperate to achieve privacy leakage between cross-App components. The memo content entered by the user in com.pdswp.su.smartcalendar was hijacked by com.xkfop.xhuioa, resulting in the leakage of the memo content by com.xkfop.xhuioa. First, get the memo content through the method getNote in com.pdswp.su.smartcalendar.bean.NoteItemBean class, and assign the memo content to the parameter android.intent.extra.TEXT of putExtra; then, pass it out through startActivity, and be com. The getIntent method of the class com.xkfop.sendService in xkfop.xhuioa gets the value of the parameter android.intent.extra.TEXT, and leaks the content of the memo through sendTextMessage.

[0110] Finally, through experimental statistics, it is found that there are privacy leakage problems among 12 groups of cross-App components in 81 applications. Among them, 4 appli...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a method for detecting privacy leakage across app components. The method comprises the following steps: extracting attribute information of a component in an app to be analyzed, classifying the app to be analyzed according to a method for determining whether privacy information can be transmitted to a third party app, and obtaining a set of apps having potential of privacy leakage; generating subsequences of the components having potential of privacy leakage separately, and using the subsequences to build a complete sequence of the components having potential of privacy leakage, using a virtual main function and instrumentation techniques to solve the problem that static stain analysis cannot be carried out due to code discontinuity, and constructing a control flow chart of the components in the component sequence; and carrying out static stain analysis and outputting a path of detected privacy leakage across app components. The method solves the problems of path explosion and code discontinuity in the prior art, accelerates privacy leakage across the app components, and improves the detection efficiency.

Description

technical field [0001] The invention belongs to the technical field of privacy leakage detection inside an Android application program, and specifically relates to a component sequence based on component potential privacy leakage, and uses a static stain analysis technology to realize an automatic detection method for privacy leakage between App components. Background technique [0002] As the market share of Android devices continues to expand, more malicious attackers target Android devices. The study found that malicious software that aims to leak user privacy information accounts for a large proportion, and in recent years, domestic mobile device user information leakage incidents have occurred frequently. According to the "Investigation Report on the Protection of Internet Users' Rights and Interests in China" released by the Internet Society of China in 2015, 78.2% of Internet users' personal identity information has been leaked, and 63.4% of Internet users' personal o...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/56
CPCG06F21/562G06F2221/033
Inventor 房鼎益李蓉汤战勇赵贝贝陈峰李政桥陈美玲杨蕾
Owner NORTHWEST UNIV(CN)
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap