Java file directory structure-based Android application repackaging detection method

A technology of file directory and detection method, which is applied in the direction of instrument, program/content distribution protection, platform integrity maintenance, etc., can solve the impact of sequence feature code obfuscation technology, code reuse and other problems, and achieve code obfuscation resistance and high accuracy Effect

Active Publication Date: 2017-10-10
SOUTHEAST UNIV
View PDF3 Cites 10 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

This method can detect changes in application code and solve problems including code reuse, plagiarism, and repackaging. However, the extraction of sequence features is easily affected by code obfuscation techniques, so it has certain limitations when analyzing practical problems.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Java file directory structure-based Android application repackaging detection method
  • Java file directory structure-based Android application repackaging detection method
  • Java file directory structure-based Android application repackaging detection method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0022] Embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings;

[0023] Such as figure 1 As shown, an Android application repackaging detection method based on the Java file directory structure comprises the following steps:

[0024] (1) Establish an application signature library: process each known APK application, obtain an application signature, and establish an application signature library:

[0025] 1.1 After the APK application is decompressed and processed, a Java class file with a specific directory structure is obtained;

[0026] 1.2 Perform an improved hash operation on each of the Java package names and Java class names, and use the resulting string as a node signature to form a tree structure with the application signature as the node;

[0027] 1.3 Perform depth-first traversal on the tree structure obtained in step 1.2, connect the traversed node signatures, obtain the final application signature, and...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a Java file directory structure-based Android application repackaging detection method. The method comprises the following steps of: for each known APK application program, carrying out decompression to obtain Java class file with a specific directory structure, wherein the directory structure can be considered as a tree structure; carrying out improved hash operation on each Java package name and each Java class name; taking obtained hash values as node signatures; connecting the node signatures by using a depth-first traversal algorithm so as to obtain a final application signature; calculating signatures of all the known applications and forming a signature library; and for a to-be-detected APK application program, obtaining a signature thereof according to a similar method, and calculating edition distances and similarities between the signature name and signatures in the signature library so as to obtain a detection result. According to the method, the influences caused by a code obfuscation technology and the insertion of malicious codes can be effectively avoided, so as to bring relatively good robustness and correctness.

Description

technical field [0001] The invention belongs to the technical field of Android application repackaging detection, and in particular relates to an Android application repackaging detection method based on a Java file directory structure. Background technique [0002] Currently, Android application repackaging detection methods mainly include code-based or behavior-based detection methods. Code or behavior-based detection methods use decompilation tools or dynamic behavior analysis tools to obtain code files or application behavior sequences, and then perform preprocessing to obtain sequence features, and obtain quantitative data of application similarity by calculating the distance of sequence features. This method can detect changes in application code and solve problems including code reuse, plagiarism, and repackaging. However, the extraction of sequence features is easily affected by code obfuscation techniques, so it has certain limitations when analyzing practical probl...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/14G06F21/56
CPCG06F21/14G06F21/562G06F2221/033
Inventor 秦中元罗斌祖剑君
Owner SOUTHEAST UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap