Dynamic measurement method and system for sensitive application in multiple secure environments

Abstract

The invention relates to a dynamic measurement method and system for sensitive application in multiple secure environments. According to the method, program source code is subjected to static analysisto generate a function calling graph and each function control flow graph so as to build a trusted path feature set; the program source code is subjected to pile pitching preprocessing; the obtaineddynamic path is separated in a security domain; a function calling sub graph and a function control flow sub graph are obtained; the security domain is used for matching the function calling sub graphwith the function calling graph; the function calling sub graph is enabled to be a sub graph of the function calling graph; and then, the security domain is used for matching the function control flow sub graph with the function control flow graph. The dynamic measurement is performed on the execution completeness of the sensitive application in the trusted path execution process, and the programis enabled to be executed on the trusted path in sequence.

Description

technical field [0001] The invention relates to a method and system for dynamic measurement of sensitive applications in multiple security environments, and belongs to the field of dynamic measurement of mobile terminal operating systems and key applications. Background technique [0002] With the rapid development of mobile Internet technology and mobile smart terminals, more and more attention has been paid to the integrity protection of terminal operating systems and key applications, and various integrity protection models and implementation methods have emerged. During the running of the system and applications, the attacker can invade and modify the code part of the program, because once the code part of the program is modified, the function of the entire program will change. For example, for the method of code modification, first, the malicious process pretends to be the target process to deceive the operating system, so that it can obtain the authority to modify the ...

AI Technical Summary

Problems solved by technology

[0010] In the prior art, the dynamic measurement of sensitive applications mainly focuses on the sensitive application itself, and does not go deep into the system framework layer that provides services for sensitive applications; the security of the trusted computing base of dynamic measurement and the efficiency of dynamic measurement need to be improved; dynamic measurement Most of them are based on the function call path, and the accuracy of dynamic measurement needs to be improved

Images