Detection method for mobile application face recognition service

Abstract

The invention relates to the technical field of information security, in particular to a detection method for a mobile application face recognition service. The method comprises the following steps: unpacking an app file to obtain files, classifying the files, and traversing a set dex file to obtain a class name and a function name; traversing all class names and comparing the class names with face recognition SDK data in preset data; judging file names of all the dynamic library files and comparing the file names with face recognition SDK data in preset data; installing and operating the app file, and traversing all pages in the application; judging whether face recognition related keywords exist in the page or not; judging whether a camera calling behavior exists in the page or not; and deduplicating the data obtained to confirm whether the application has a face recognition related service or not. Compared with the prior art, the invention comprises unpacking and extracting a file from a target App, and comparing a face recognition database, and traversing all pages to be associated with face recognition scene keywords, so that related information related to face recognition in the App is effectively obtained.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a detection method for a mobile application face recognition service. Background technique [0002] In recent years, with the rapid development of face recognition technology, "swiping face" has gradually become the main field of biometric technology application in the new era. Especially after entering 2017, face recognition has ushered in a blowout explosion. Faced with laws and regulations and certain business needs, Internet companies have launched account real-name authentication, and the face authentication link is included in related apps. realized in. [0003] However, while face recognition technology is developing rapidly and deepening into society, it has also brought us many security challenges. Information security risks caused by personal privacy data leakage and technology abuse need to be resolved urgently. The lack of network and data security guar...

AI Technical Summary

Problems solved by technology

[0003] However, while face recognition technology is developing rapidly and deepening into society, it has also brought us many security challenges. Information security risks caused by personal privacy data leakage and technology abuse need to be resolved urgently

The lack of network and data security guarantee mechanisms can easily lead to face data leakage. The current security technical standards and usage specifications for face recognition technology are not perfect. The responsibilities and obligations of face data controllers, the rights of face data subjects and the There is a lack of relevant regulations on the security measures that should be adopted in all aspects of data collection, storage, and processing

Most apps did not clearly inform and obtain user consent when collecting face data, and did not even explain the purpose, scope and method of using face recognition technology in the privacy policy, making the passive collection and use of face data the norm. Social entertainment apps and online education apps do not collect and use face data in accordance with relevant laws and regulations, resulting in frequent abuse of face recognition technology. However, face recognition services in many apps require users to register and After use, it will be triggered when related businesses are involved, such as remote financial account opening, card binding verification, account login, facial recognition attendance, facial recognition payment, etc.

Images