A kind of Android vehicle terminal system vulnerability detection system and method

Abstract

The invention relates to an Android vehicle-mounted terminal system vulnerability detection system and method. The detection system comprises a vehicle-mounted terminal system vulnerability library module, a vehicle-mounted terminal system vulnerability detection module and a vehicle-mounted terminal system vulnerability detection report generation module. The system can detect vulnerabilities existing in a connected Android vehicle-mounted terminal system and report a detection result to a user. Through investigation and analysis of an existing method and a detection tool, the Android vehicle-mounted terminal system vulnerability detection method is based on a Trade Federation test framework and is assisted by construction of a vehicle-mounted terminal system vulnerability test case, andfinally Android vehicle-mounted terminal system vulnerability detection is achieved. The vulnerability detection system can realize the functions of equipment management, test case management, test task scheduling execution and the like, and is favorable for helping timely discover and repair system vulnerabilities so as to improve the safety of a vehicle-mounted terminal operating system.

Description

technical field [0001] The invention relates to a vulnerability detection technology, belonging to the technical field of software security in information security, in particular to a vulnerability detection system and method of an Android vehicle-mounted terminal system. Background technique [0002] Since the Android vehicle terminal system is based on the Android system, and the system architecture is basically the same, the method of vulnerability detection on the Android system can also be transplanted to the vehicle terminal system. At present, the representative Android system vulnerability detection tools in China mainly include: VTS (Vendor Test Suite) and X-Ray, but there are also limitations of poor compatibility. [0003] X-Ray can detect unpatched vulnerabilities in Android devices, and X-Ray learns in detail about a class of vulnerabilities known as "privilege escalation." Malicious applications can exploit such vulnerabilities to gain root privileges on the d...

AI Technical Summary

Problems solved by technology

[0011] The current Android system vulnerability automatic detection tool detection process is very simple, lack of management of detection tasks, detection equipment and test cases, etc., so it causes unstable operation and poor compatibility on some Android system versions, because the Android platform itself also has Fragmentation is a serious problem, so existing tools cannot adapt to the ecological environment of the Android system

In addition, the existing Android system vulnerability detection tools support a small number of vulnerabilities and lack of maintenance of the vulnerability library, resulting in very incomplete detection results

[0012] The existing methods for researching Android system vulnerability detection are not universal because they only target a single vulnerability or a specific type of vulnerability, and cannot realize batch detection of vulnerabilities, with low automation and low efficiency.

Images