Detection method and detection devices of application

Abstract

The embodiment of the invention discloses a detection method of an application. The method includes: acquiring the to-be-detected application; extracting private application programming interfaces (APIs) from a software development kit (SDK) through a symbol list tool of nm; extracting a target API in the to-be-detected application; and determining that the target API is a private API of the to-be-detected application if the target API extracted from the to-be-detected application is consistent with the private API extracted from the SDK. The embodiment of the invention further provides a detection device. According to the embodiment of the invention, an existing class-dump tool is replaced by the nm tool to acquire the private APIs in the SDK, the nm tool is suitable for use in a system of a later version, thus a detection process can be enabled to be more stable and the accuracy of detecting the private API can be improved, and the reliability of detection is guaranteed in actual detection.

Description

technical field [0001] The invention relates to the communication field, in particular to a detection method and a detection device of an application program. Background technique [0002] Since Apple officially adopts a strict application program audit mechanism, if an application is found to use a private application programming interface (English full name: Application Programming Interface, English abbreviation: API), it will be forcibly removed from the Apple App Store or rejected. on shelves. [0003] Currently, there are some open source tools that help audit private APIs. It extracts the list of private APIs through the following formula: [0004] Private api=(api in header file generated by class-dump Framework library-(api in Framework header file=documented api(docSet.dsidx)+undocumented api))+PrivateFramework api [0005] Then write a script that automatically extracts the API to get the private API list. [0006] However, open source tools using existing priv...

AI Technical Summary

Problems solved by technology

[0006] However, open source tools using existing private APIs may be prone to errors due to the instability of the tool, such as figure 1 as shown, figure 1 It is a schematic diagram of the interface displaying the system error when detecting the private API in the prior art. In addition, the formula used above is not completely correct. The first reason is that there are private classes in the Framework and public classes in the PrivateFramework. If only according to the above formula Extracting private APIs will cause many public functions to be mistaken for private APIs, resulting in a high rate of false positives. The second reason is that the detection of private APIs can be avoided by adding strings to private APIs. Omissions in the results increase the rate of false negatives, which is not conducive to the integrity of the test results

see figure 2 , figure 2 A schematic diagram is shown for the interface where the private API of the application cannot be detected in the prior art. When using the class-dump tool to detect the application of multiple private APIs, the following may occur: figure 2 The same interface, unable to detect the result, obviously the class-dump tool can no longer fully meet the function of private API detection

Images