Application Debugging Control via System Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for managing application programs on mobile terminals fail to adequately protect user data from malicious software, allowing virus applications to acquire private user information during debugging processes.
Innovation Solution
A method and device that prevent debugging of specific application programs by monitoring their type information and restricting access, ensuring that only authorized applications can debug certain types, thereby preventing malicious software from acquiring user data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If debugging functions are provided for application programs, then testing and regulation capabilities are improved, but security of user information deteriorates due to potential malicious access
Solution Approach 1:
The system introduces a system program as an intermediary between application programs and debugging operations. The system program receives debugging requests, verifies the legitimacy of the debugging application, and controls the debugging process. This intermediary mechanism enables legitimate debugging while preventing malicious access, thus resolving the contradiction between testing capability and information security.
Solution Approach 2:
The system changes the state parameter of application programs by setting different debuggability statuses. Applications can be marked as debuggable or non-debuggable based on their type and security requirements. This parameter change allows the system to enable debugging for safe applications while protecting sensitive applications, balancing testing needs with security concerns.
2Productivity
If all application programs allow debugging, then development and testing efficiency is improved, but vulnerability to virus attacks increases
Solution Approach 1:
The system applies different debugging permissions to different application programs based on their local characteristics and security requirements. Rather than a uniform approach, each application can have its debuggability independently controlled. This allows high-productivity debugging for safe applications while maintaining security for vulnerable applications, resolving the contradiction between development efficiency and virus vulnerability.
3Reliability
If debugging access is restricted to protect user data, then security is improved, but debugging functionality for legitimate purposes deteriorates
Solution Approach 1:
The system implements dynamic debugging control where the debuggability of application programs can change based on runtime conditions, user actions, and security assessments. The system program can dynamically grant or revoke debugging permissions, allowing legitimate debugging when needed while maintaining security protection. This dynamic approach resolves the contradiction between security and debugging functionality.
Data Source
Figure 1~2
Figure 3~4
Figure 5~6
AI summary
The embodiment of the present disclosure discloses a method and device for managing an application program, and belongs to the technical field of computers. The method includes that: type information of a first application program running on a foreground of a terminal is acquired (101); and the first application program is prevented from being debugged by other application program if the type information of the first application program is preset type information (102). (Fig. 1)