A B-based access control modeling and security analysis method for android

Abstract

The invention discloses an Android access control modeling and security analysis method based on the B method. The method uses formal language B to regulate and model the security attributes and key operations in Android access control, and verify the security through model detection. . This method provides a new method for Android access control modeling and security analysis. It formalizes the abstraction of the permission mechanism, designs the component entity abstraction machine and builds the basic model. And the extended model based on fine-grained policy, and finally analyze the security of the access control according to the theorem proof and model detection results, which provides a practical and effective way for operating system security mechanism modeling and system security proof.

Description

technical field [0001] The invention relates to the field of Android access control security, in particular to a method for modeling and security analysis of Android access control based on the B method. Background technique [0002] With the large-scale application of the ARM-Android mobile platform architecture in the Internet of Things scenario, its security issues have become a research hotspot in industry and academia. Android is a permission-based access control system. Aiming at problems such as too coarse granularity of Android access control permissions, insufficient permission management, and insufficient document descriptions, many access control improvement solutions have been proposed to improve its security, such as the use of fine-grained access control granularity. Classical improvement strategies, implementation of behavior-based access control in system middleware, etc. At the same time, some defense schemes have been proposed for privilege escalation atta...

AI Technical Summary

Problems solved by technology

However, under the current situation of serious fragmentation of the Android system, the access control scheme relying on the system version has exposed application limitations, and the implementation of the scheme lacks theoretical analysis and verification, and the completeness and correctness of the rules cannot be guaranteed, and its security cannot be obtained. verify

To sum up, the Android platform access control lacks a general access control formal model, and cannot provide a unified security analysis and verification method.

Images