面向Android安全性的Smali混淆代码分析  

Confused Smali code analysis for safety of Android system

作　　者：朱泽策 童燊嗣 沈备军[1] 戚正伟[1] 张涛[2] 赵敏[2] 

机构地区：[1]上海交通大学软件学院,上海200240 [2]解放军理工大学指挥信息系统学院,江苏南京210007

出　　处：《计算机工程与设计》2016年第2期324-330,共7页Computer Engineering and Design

基　　金：国家973重点基础研究发展计划基金项目(2015CB352203);国家科技重大专项基金项目(2012zx03006-002);国家自然科学基金项目(61472242)

摘　　要：Android系统的代码安全性分析面临极大挑战:厂商在发布之前会对Android系统的原生代码进行修改和混淆处理,且常常无法获得其源代码。针对挑战,对Android系统的Smali代码进行分析研究,基于抽象语法树的相似度,比较Android原生代码和厂商修改后的混淆代码,获取其类和方法的映射关系,做出修改和混淆标注,为Android安全性分析和取证提供支持。基于上述方法,研发Smali混淆代码自动分析工具,进行一系列实验,验证了该方法和工具的有效性。The analysis and support for safety of Android system face great challenge.Code of Android system is often confused and modified before launched by different companies.Considering the condition of Android system safety,abstract syntax tree of Smali code was researched.Code similarity of native code and confused code was detected with the help of abstract syntax trees.The relationship between classes and methods was offered and they were labeled to support analysis of Android system with huge amount of source data.It helped the follow-up treatment on the safety of Android system.Based on the above method,a tool was developed to analyze Android source codes and confuse Smali codes automatically.The result of comparative experiments demonstrate its high accuracy and efficiency.

关 键 词：安卓安全性 Smali代码 混淆代码 抽象语法树 对比分析 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]