改进的Android强制访问控制模型  

Improved mandatory access control model for Android

作　　者：蒋绍林[1] 王金双[1] 于晗[1] 张涛[1] 陈融[1] 

机构地区：[1]解放军理工大学指挥信息系统学院,南京210007

出　　处：《计算机应用》2013年第6期1630-1636,共7页journal of Computer Applications

基　　金：理工大学预先研究基金资助项目(KYZYZLXY1208)

摘　　要：为了降低Android平台受应用层权限提升攻击的可能性,研究分析了对利用隐蔽信道进行的合谋攻击具有较好防御能力的XManDroid模型,针对该模型存在无法检测多应用多权限合谋攻击的问题,采用构建进程间通信连接图并利用有色图记录应用通信历史的方法,提出了一种基于通信历史的细粒度强制访问控制模型。对原型系统的测试结果表明:所提出的模型能够很好地解决XManDroid模型存在的问题。In order to protect Android platforms from the application-level privilege escalation attacks, this paper analyzed the XManDroid access control model, which has better ability on fighting these attacks, especially the collusion attack on the covert channel. To address the problem that XManDroid could not detect the multi-application and multi- permissions collusion attacks, this paper proposed an improved mandatory access control model which recorded the communication history of applications by building an IPC links colored diagram. At last, the test result on the prototype system show that the new model can solve the problem in the XManDroid well.

关 键 词：安卓系统 权限机制 安全沙盒 强制访问控制 权限提升攻击 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]