Permission improvement vulnerability detection method and related device

Abstract

The invention discloses a permission improvement vulnerability detection method. The permission improvement vulnerability detection method comprises the steps of obtaining a CClink comprising a sending component, a medium component and a receiving component; when the receiving component in the CCLink declines the permision attribute, judging whether the sending component declines the corresponding(uses-permision) attribute or not; if the (uses-permision) attribute is not declared, judging whether the media component has a (uses-permision) attribute corresponding to the (permision) attribute of the receiving component or not; if the media component has the (uses-permision) attribute, judging whether the media component has the (permision) attribute or not; and if the permissive attribute is not set for the media component, determining that the permission improvement problem exists. The authority is automatically detected to improve the vulnerability, manual interference is not needed,the efficiency is improved, the user experience is improved, and meanwhile, the invention further provides a device, electronic equipment and a computer readable storage medium which all have the above beneficial effects.

Description

technical field [0001] The present application relates to the technical field of detection, and in particular to a detection method, device, electronic equipment, and computer-readable storage medium for privilege escalation vulnerabilities. Background technique [0002] With the rapid development of the mobile Internet, the functions of smart mobile devices are becoming more and more powerful, which is profoundly affecting people's daily life. In daily life, people rely more and more on intelligent technology. Therefore, there is a large amount of personal information stored on smart devices. Due to the open source of android source code, the risks of the application components developed by it have attracted more and more attention. [0003] Intent is the main medium of inter-component communication (ICC) in android applications. ICC methods such as startActivity(intent), startService(intent), and sendBroadcast(intent) can start Activity and Service, or send broadcast messa...

AI Technical Summary

Problems solved by technology

There are already many detection methods for the detection of android application privilege escalation vulnerabilities, but many detection methods need to modify the source code of the android system and dynamically monitor the communication behavior between them when the application is running, which is more efficient than the static analysis method low, difficult

Images