Method for detecting privacy leakage on basis of context information

Abstract

The invention discloses a method for detecting privacy leakage on Android platforms on the basis of context information. The method comprises the following steps of: 1, carrying out static taint analysis on software to obtain a taint propagation path; 2, carrying out static function analysis on the software to obtain a software function calling map; 3, constructing a mapping relationship between Android authorities and APIs, and collecting a system and UI event information at the same time; 4, integrating data collected in the steps 1, 2 and 3, and constructing privacy-related API function context information; 5, intercepting privacy-related API functions used in the software, and constructing dynamic execution context information; 6, carrying out privacy leakage detection on the collecteddynamic execution context information and the privacy-related API function context information constructed in static analysis; and 7, if a similarity in the privacy leakage detection in the step 6 isgreater than or equal to a set threshold value Q, judging that a privacy leakage risk exists. The method is capable of achieving the aims of automatically detecting privacy detection and protecting privacy data, and has relatively low extra resource consumption.

Description

technical field [0001] The invention belongs to the field of information security and privacy leakage detection and protection, and in particular relates to a privacy leakage detection method based on context information. Background technique [0002] The Android operating system has surpassed Windows to become the operating system with the largest market share in the world. While the Android market continues to flourish, the third-party software market provides APPs with rich functions. At the same time, a large amount of high-value private data is stored in the user's system. Once the private data is leaked, it will bring a heavy mental burden and property loss to the user. [0003] Scholars at home and abroad have conducted a lot of in-depth research on the privacy leakage detection of the Android system. Such research is based on static and dynamic analysis. Static analysis analyzes the APK file and uses methods such as static data flow analysis, information flow, and c...

AI Technical Summary

Problems solved by technology

[0007] 2) The source code of the Android system needs to be modified in the way of dynamic monitoring, which increases the difficulty of development while sacrificing a small amount of system overhead

Due to the serious fragmentation of the Android market, different Android version systems need to be customized and modified accordingly, making this method difficult to promote

[0008] 3) Using the method of repackaging and inserting monitoring code will modify the content of APK, which has a great impact on the software itself, and some software uses reinforcement methods to make repackaging fail, and sometimes even the repackaged software cannot run Happening

Images