A method and device for detecting privacy data leakage

Abstract

The invention discloses a method and device for detecting privacy data leakage, and the method and device are applied to Android mobile terminals. The method comprises the steps of adding corresponding stain marks to variables generated by privacy data in an Android mobile terminal, and saving the variables and their stain marks to corresponding allocated storage space according to the types of the variables; tracing the propagation of the stain marks corresponding to the variables according to the rule of stain propagation set after analyzing a control flow which contains control information; detecting whether or not the transmitted data at a preset aggregation point has the stain mark, determining that an application has the behavior of leaking privacy data if the data has the stain mark, and otherwise determining that the application does not have the behavior of leaking privacy data. According to the method and device for detecting the privacy data leakage, the accuracy of privacy data leakage detection is improved, and the information security of a user is ensured.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method and device for detecting leakage of private data. Background technique [0002] With the development of mobile information technology, the number of Android users and the number of Android applications have also increased rapidly. Among these Android applications, some applications are malicious applications that gain profits by obtaining users' private data. Moreover, users' security awareness is relatively weak. For example, most users will store their private data in their smartphones. According to statistics, more than 90% of Android applications will obtain users' private data, and some even non-malicious Android applications But that doesn't mean it's necessarily safe. In addition, there are many loopholes in the Android application itself, which also provides opportunities for criminals to obtain users' private data. The above reasons have led to se...

AI Technical Summary

Problems solved by technology

Moreover, users' security awareness is relatively weak. For example, most users will store their private data in their smartphones. According to statistics, more than 90% of Android applications will obtain users' private data, and some even non-malicious Android applications But that doesn't mean it's safe

In addition, there are many loopholes in the Android application itself, which also provides opportunities for criminals to obtain users' private data

The above reasons have led to the serious leakage of user privacy data at present, so it is necessary to propose a technical solution for detecting the leakage of Android application privacy data

Images