Application integrity protection test method, intelligent terminal and storage medium

Abstract

The invention discloses an application integrity protection test method, an intelligent terminal and a storage medium, and the method comprises the steps: obtaining an APK package of a to-be-tested application, and modifying the APK package according to a test case; re-signing the modified APK package, and installing the re-signed APK package on an intelligent terminal; and starting the to-be-tested application installed on the intelligent terminal, when it is detected that the to-be-tested application runs normally, determining that the to-be-tested application is unsafe, and when it is detected that the to-be-tested application cannot run normally, determining that the to-be-tested application is safe. By adopting the black box testing mode, the content of the APK is added, deleted and modified in a full-automatic mode, the APK is installed after re-signing, whether the function of the APK can be normally operated or not is detected, and whether the APK has the tamper-proof and self-protection functions or not can be accurately detected by using the black box testing mode.

Description

technical field [0001] The invention relates to the technical field of application detection, in particular to a testing method for application integrity protection, an intelligent terminal and a storage medium. Background technique [0002] Black box testing is also called functional testing, which is to detect whether each function can be used normally through testing. In the test, the program is regarded as a black box that cannot be opened, and the program interface is tested without considering the internal structure and characteristics of the program. It only checks whether the program function is in normal use according to the requirements specification. Whether the program can properly receive input data and produce correct output information. Black-box testing focuses on the external structure of the program, regardless of the internal logical structure, and mainly tests the software interface and software functions. Black box testing is based on the user's point ...

AI Technical Summary

Problems solved by technology

For applications (APPs) that have not undergone integrity verification, the attacker can decompile the APK through a decompilation tool, modify or delete the resource files, source code files, configuration files, etc. in the APK at will, and repackage it into other applications, resulting in The emergence of a large number of pirated applications damages the interests of developers, and can also add malicious codes to achieve application phishing, steal login account passwords, payment passwords and other illegal operations

[0004] In the prior art, the method of testing the integrity protection of an Android application through a black box is generally to manually change the APK package, and then install it on the mobile phone to test whether it can run normally. However, this test method is not automated, and the detection efficiency is low. Systematic testing, the resulting test report is also very one-sided

Images