基于Android重打包的应用程序安全策略加固系统设计  

Repackaging Android Applications for Enforcing Security Policy

作　　者：李宇翔[1,2] 林柏钢[1,2] 

机构地区：[1]福州大学数学与计算机科学学院,福建福州350108 [2]网络系统信息安全福建省高校重点实验室,福建福州350108

出　　处：《信息网络安全》2014年第1期43-47,共5页Netinfo Security

基　　金：福建省科技厅重点资助项目[2012H0025];福建省安全课题资助项目[822711]

摘　　要：随着移动互联网快速发展,智能手机面临着严峻的安全威胁。由于Android权限划分的粗粒度以及权限授权一次性的约束,对于应用申请的权限,用户要么全部接受,要么拒绝安装,对于安装后应用可疑行为束手无策。为此文章设计了利用重打包注入安全防护代码的加固系统,不仅提供应用动态权限管理机制,还提供权限划分细粒度的安全策略,从源头上遏制恶意代码行为,用户也可根据需求定制策略,满足不同安全需求的安全加固应用。With the rapid development of mobile Intemet, smart phones are facing serious security threats. Due to the coarse-grained division of permission and permission authorized only one time on Android, users have either accept all permissions at install time, or else can＇t install an App at all. For suspicious behavior ,users are even more helpless after applications installed. This paper designs a system that using the Android repackaging technology, which injects the security code to the application. It＇s not only provides the dynamic permission management but also provides the fine-grained security policy and contain the malicious code from the source. Users can also customize strategy to meet the different security need.

关 键 词：Android安全 重打包 动态权限管理 细粒度策略 应用加固 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]