Penetration testing method and device for mobile application of swan gap system

Abstract

The invention relates to a penetration testing method and device for mobile application of a swan-gap system. The method comprises the following steps: acquiring security architecture and mechanism information of the swan gap system; analyzing a system identity verification and authorization mechanism; constructing and executing a series of penetration test cases; in the static analysis stage, a combined feature vector is obtained based on the pre-obtained sensitive permission features, a suspicious component is positioned, and the suspicious component serves as an entry point; in the dynamic analysis stage, malicious behaviors and corresponding operation characteristics are triggered and recorded by utilizing symbolic execution and taint analysis methods based on a sensitive data flow monitoring method; taking a non-transfer function in the application program as a target function to mine concurrent vulnerabilities; evaluating the communication security of the application program; analyzing a data storage and protection mechanism; and evaluating a security policy and a control mechanism of the application. Compared with the prior art, the method has the advantages of effectively improving the efficiency and accuracy of penetration testing on the mobile application of the swan Mongolia system, further ensuring the safety of the application program and the like.

Description

Technical Field

[0001] The present invention relates to the field of penetration testing technology, and in particular to a penetration testing method and device for Hongmeng system mobile applications. Background Art

[0002] With the increase in localization coverage, more and more core businesses are carried by domestic systems, including various mobile businesses and applications. Hongmeng system is a domestic operating system developed by Huawei. In recent years, Huawei's global influence has increased, and its application in the field of smartphones has gradually expanded. More and more mobile applications of the company have begun to support running on Hongmeng system. In recent years, the company's mobile security vulnerabilities have occurred frequently. According to statistics, nearly 50% of the first vulnerabilities of Shanghai Company come from mobile applications. However, the company's current penetration testing of mobile applications is only based on iOS and Android systems. There is a research gap in the security testing technology of mobile applications on Hongmeng system. In summary, it is necessary to study the penetration testing technology based on Hongmeng system, strengthen the testing of the security of mobile applications on Hongmeng system, and ensure the safe and stable operation of the company's business on Hongmeng system.

[0003] In China, the research and application of penetration testing technology for Hongmeng system applications are still in a relatively early stage. At present, domestic researchers and security experts are paying more and more attention to the security of Hongmeng system applications, but there are relatively few in-depth studies and results. In academia and research institutes, some scientific research teams have begun to pay attention to the penetration testing technology of Hongmeng system applications and have carried out some preliminary research work, including vulnerability mining, code auditing and security testing of Hongmeng system applications. However, these studies often only involve some basic penetration testing methods and case analysis, and lack systematic and in-depth research. In terms of security vendors and penetration testing service providers, some companies have begun to realize the importance of Hongmeng system application security and have carried out corresponding penetration testing services. Companies conduct vulnerability scanning and penetration testing on Hongmeng system applications to provide customers with security assessment reports and repair suggestions. However, the current commercial penetration testing tools and services are relatively weak in supporting Hongmeng system applications and need to be further improved. Abroad, the research and application of penetration testing technology for Hongmeng system applications are relatively active. Foreign researchers, security teams and vendors have begun to pay attention to and study the security of Hongmeng system applications and have achieved certain research results. In academia and research institutions, security research teams from some foreign universities have conducted research on penetration testing technologies for Hongmeng system applications. These studies involve multiple aspects, including vulnerability analysis and discovery, code auditing, permission management, and attack defense. Through in-depth research and experiments, they have promoted the development of Hongmeng system application security technology. In the commercial field, some foreign security vendors and penetration testing service providers also provide penetration testing services for Hongmeng system applications, and use advanced testing tools and methods to help customers evaluate and strengthen the security of Hongmeng system applications. These service providers also provide attack defense solutions for Hongmeng systems to help customers establish a secure application environment.

[0004] However, for the research and application of penetration testing technology for Hongmeng system as a whole, the existing methods still have the problem of poor testing results. Therefore, how to improve the efficiency and accuracy of testing and thus ensure the security of application programs is still a problem that needs to be solved in this field. Summary of the invention

[0005] The purpose of the present invention is to overcome the defects of the above-mentioned prior art and to provide a penetration testing method and device for Hongmeng system mobile applications, which can effectively improve the efficiency and accuracy of penetration testing of Hongmeng system mobile applications, thereby ensuring the security of the application.

[0006] The purpose of the present invention can be achieved by the following technical solutions:

[0007] According to a first aspect of the present invention, a penetration testing method for mobile applications of the Hongmeng system is provided, comprising the following steps: S1, obtaining the security architecture and mechanism information of the Hongmeng system; S2, analyzing the authentication and authorization mechanism of the Hongmeng system; S3, constructing a series of penetration testing cases for mobile applications of the Hongmeng system; S4, executing the series of penetration testing cases; S5, in the static analysis phase, based on the pre-acquired sensitive permission features, obtaining the combined feature vector, and locating the suspicious components, and using the suspicious components as entry points to prepare for dynamic analysis; S6, in the dynamic analysis phase, based on the sensitive data flow monitoring method, using symbolic execution and taint analysis methods to trigger and record malicious behaviors and corresponding operating characteristics; S7, using the non-transitive function in the application as the target function to mine concurrent vulnerabilities; S8, evaluating the communication security of the application; S9, analyzing the data storage and protection mechanism; S10, evaluating the security policy and control mechanism of the application.

[0008] As a preferred technical solution, the security architecture and mechanism information includes permission model, security policy and control mechanism information.

[0009] As a preferred technical solution, S2 also includes evaluating the security isolation and sandbox mechanism of the Hongmeng system.

[0010] As a preferred technical solution, the series of penetration test cases include different vulnerability types and attack scenarios.

[0011] As a preferred technical solution, the combined feature vector is obtained by combining sensitive permission features, API call mode features and data flow features.

[0012] As a preferred technical solution, in S6, the symbolic execution is used to simulate the program execution path and detect potential security vulnerabilities, and the taint analysis is used to track data flow and identify potential data that may be maliciously exploited.

[0013] As a preferred technical solution, S7 specifically includes: identifying the non-transfer function; using the non-transfer function as the target function and performing secondary mining using an automated method; locating the potential trigger points and execution paths of concurrent vulnerabilities based on the target function after secondary mining; and verifying the mining process of the concurrent vulnerability.

[0014] As a preferred technical solution, in S8, the communication security includes network transmission encryption and the use of security protocols.

[0015] As a preferred technical solution, S9 specifically includes checking the security of the storage method and encryption measures of sensitive data.

[0016] According to a second aspect of the present invention, there is provided a penetration testing device for a mobile application of a Hongmeng system, comprising a memory, a processor, and a program stored in the memory, wherein the method described is implemented when the processor executes the program.

[0017] Compared with the prior art, the present invention has the following beneficial effects:

[0018] 1. The penetration testing method for Hongmeng system mobile applications provided by the present invention can enhance the accuracy and coverage of static analysis by introducing multiple key features such as sensitive permissions, API call modes, data flows, etc. in the static analysis stage, significantly reduce missed detections and false positives, and improve analysis efficiency and accuracy, thereby providing developers and security engineers with more intuitive risk assessment results, helping to timely discover and repair security vulnerabilities in the early development stage, thereby reducing security risks and maintenance costs;

[0019] 2. The penetration testing method provided by the present invention designs and implements a method based on sensitive data flow monitoring in the dynamic analysis stage. Through symbolic execution, taint analysis and real-time data tracking technology, the runtime behavior of the application is comprehensively monitored, which can significantly improve the depth and accuracy of dynamic analysis, and can timely discover hidden vulnerabilities and abnormal behaviors at runtime. It not only enhances the security protection capability of the Hongmeng system, but also provides strong data support for vulnerability repair and defense strategy formulation, effectively reduces the risk of being attacked, and ensures the security and stability of the application.

[0020] 3. The penetration testing method provided by the present invention uses a non-transitive function as the target function in the process of concurrent vulnerability mining and verification. By analyzing the non-transitive function, potential vulnerability trigger points and critical paths in concurrent execution can be more accurately identified, and these target functions can be deeply mined using automated tools. Through a strict verification process, it is ensured that the discovered vulnerabilities are real and effective, which can effectively improve the efficiency and accuracy of concurrent vulnerability mining, discover complex concurrent problems that are difficult to detect with traditional methods, and optimize the vulnerability detection process by reducing false positives and negatives, thereby reducing the workload and time cost of security analysis. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 A schematic flow chart of the method is provided for the present invention. DETAILED DESCRIPTION

[0022] The present invention is described in detail below in conjunction with the accompanying drawings and specific embodiments. This embodiment is implemented based on the technical solution of the present invention, and provides a detailed implementation method and specific operation process, but the protection scope of the present invention is not limited to the following embodiments.

[0023] Example

[0024] like Figure 1 As shown, this embodiment provides a penetration testing method for Hongmeng system mobile applications, and the specific implementation steps are as follows:

[0025] Step S1, obtain the security architecture and mechanism information of the Hongmeng system, including the permission model, security policy and control mechanism information. Specifically, deeply analyze the permission model of the Hongmeng system, study its security policy and control mechanism, and ensure the security and reliability of the system.

[0026] Step S2: Analyze the authentication and authorization mechanism of the Hongmeng system and evaluate the security isolation and sandbox mechanism of the Hongmeng system. Specifically, evaluate the authentication process and authorization mechanism of the Hongmeng system in detail to ensure the legitimacy and security of users and applications, and study its security isolation and sandbox mechanism.

[0027] Step S3, design a series of penetration test cases for Hongmeng system mobile applications, covering common vulnerability types and attack scenarios to comprehensively evaluate the security of the application.

[0028] Step S4, execute a series of designed penetration test cases to evaluate the security and defense capabilities of the application and discover security weaknesses and potential vulnerabilities.

[0029] Step S5, static analysis phase, based on the pre-acquired sensitive permission features, obtain the combined feature vector, locate the suspicious components, and use the suspicious components as entry points to prepare for dynamic analysis. Specifically, in static analysis, multiple features such as sensitive permissions, API call patterns, data flows, etc. are introduced and combined into a comprehensive feature vector. These feature vectors can not only reveal potential security risks in the application, but also help locate those suspicious components with potential risks as entry points for further dynamic analysis. In this way, full preparation can be made for the subsequent dynamic analysis phase.

[0030] Step S6, the dynamic analysis phase, based on the sensitive data flow monitoring method, uses symbolic execution and taint analysis methods to trigger and record malicious behaviors and corresponding operating characteristics, and discover potential vulnerabilities and security weaknesses. Specifically, in the dynamic analysis phase, a method based on sensitive data flow monitoring is designed, and this process is supported by advanced technologies such as symbolic execution and taint analysis. Symbolic execution can simulate the program execution path and detect potential security vulnerabilities; while taint analysis tracks the flow of data and identifies which data may be maliciously exploited. By combining these technologies, more malicious behaviors in the application can be effectively triggered, and the path of sensitive data flow and related runtime characteristics can be fully recorded. This can not only help discover hidden security issues, but also discover potential vulnerabilities and security weaknesses in the application to ensure the security of the code.

[0031] Step S7, taking the non-transitive function in the application as the target function, and then mining the concurrency vulnerabilities, and verifying the mining. Specifically, after identifying the non-transitive function, the non-transitive function is taken as the target function, and the automatic method is used for in-depth mining; then based on the target function after in-depth mining, the potential trigger points and execution paths of the concurrency vulnerabilities are located. This method can more effectively locate the potential trigger points and execution paths of concurrency vulnerabilities by identifying and analyzing the non-transitive functions in the program. Subsequently, these target functions are deeply mined and analyzed using automated tools to discover possible vulnerabilities. At the same time, this vulnerability mining method is verified through a series of experiments and tests.

[0032] Step S8: Evaluate the communication security of the application, including the use of network transmission encryption and security protocols. Specifically, check the security of the application during data transmission, including the use of network transmission encryption and security protocols, to ensure the security of the communication process.

[0033] Step S9: Analyze the data storage and protection mechanism of the application program. Specifically, check whether the storage method and encryption measures of sensitive data are safe and reliable to ensure the security of data during storage.

[0034] Step S10, comprehensively evaluate the security policies and control mechanisms of the application, provide improvement suggestions and best practices, and help developers improve the overall security of the application.

[0035] Furthermore, this embodiment also provides a penetration testing device for Hongmeng system mobile applications, including a memory, a processor, and a program stored in the memory. When the processor executes the program, the various steps of the aforementioned method are implemented. The execution process is consistent with the specific content of the aforementioned steps, and will not be repeated here.

[0036] The preferred specific embodiments of the present invention are described in detail above. It should be understood that a person skilled in the art can make many modifications and changes based on the concept of the present invention without creative work. Therefore, any technical solution that can be obtained by a person skilled in the art through logical analysis, reasoning or limited experiments based on the concept of the present invention on the basis of the prior art should be within the scope of protection determined by the claims.

Claims

1. A penetration testing method for Hongmeng system mobile applications, characterized in that: The following steps are involved: S1, obtain the security architecture and mechanism information of Hongmeng system; S2, analyze the authentication and authorization mechanism of Hongmeng system; S3, build a series of penetration test cases for Hongmeng system mobile applications; S4, executing the series of penetration test cases; S5, static analysis stage, based on the pre-acquired sensitive permission features, obtain the combined feature vector, locate the suspicious component, and use the suspicious component as the entry point to prepare for dynamic analysis; S6, dynamic analysis phase, based on sensitive data flow monitoring method, uses symbolic execution and taint analysis methods to trigger and record malicious behaviors and corresponding operation characteristics; S7, takes the non-transitive functions in the application as the target function to mine concurrency vulnerabilities; S8, evaluates the communication security of the application; S9, analyze data storage and protection mechanisms; S10, evaluate the application's security policies and control mechanisms.

2. The penetration testing method for Hongmeng system mobile applications according to claim 1 is characterized in that: The security architecture and mechanism information includes permission model, security policy and control mechanism information.

3. The penetration testing method for Hongmeng system mobile applications according to claim 1 is characterized in that: The S2 also includes evaluating the security isolation and sandbox mechanism of the Hongmeng system.

4. The penetration testing method for Hongmeng system mobile applications according to claim 1 is characterized in that: The series of penetration testing cases include different vulnerability types and attack scenarios.

5. The penetration testing method for Hongmeng system mobile applications according to claim 1 is characterized in that: The combined feature vector is obtained by combining sensitive permission features, API call mode features and data flow features.

6. The penetration testing method for Hongmeng system mobile applications according to claim 1 is characterized in that: In S6, the symbolic execution is used to simulate the program execution path and detect potential security vulnerabilities, and the taint analysis is used to track data flow and identify potential data that may be maliciously exploited.

7. The penetration testing method for Hongmeng system mobile applications according to claim 1 is characterized in that: The S7 specifically includes: identifying the non-transfer function; Taking the non-transfer function as the objective function, performing secondary mining by using an automated method; Based on the target function after secondary mining, the potential trigger points and execution paths of concurrent vulnerabilities are located; The mining process of the concurrent vulnerability is verified.

8. The penetration testing method for Hongmeng system mobile applications according to claim 1 is characterized in that: In the S8, the communication security includes network transmission encryption and the use of security protocols.

9. The penetration testing method for Hongmeng system mobile applications according to claim 1 is characterized in that: The S9 specifically includes checking the security of the storage method and encryption measures of sensitive data.

10. A penetration testing device for a mobile application of Hongmeng system, comprising a memory, a processor, and a program stored in the memory, characterized in that: When the processor executes the program, the method according to any one of claims 1 to 9 is implemented.

Images