基于Fuzzy-IBE的提权攻击防御模型  

Model design against unauthorized attack based on Fuzzy-IBE

作　　者：张悦[1] 郑东[1] 谭彭超 张应辉[1,2] 

机构地区：[1]西安邮电大学无线网络安全技术国家工程实验室,陕西西安710121 [2]国家密码管理局密码科学技术国家重点实验室,北京100878

出　　处：《计算机工程与设计》2016年第12期3161-3164,3170,共5页Computer Engineering and Design

基　　金：国家自然科学基金项目(61272037;61402366;61472472);陕西省自然科学基础研究计划基金项目(2013JZ020;2015JQ6236);陕西省教育厅科研计划基金项目(15JK1686);西安邮电大学研究生创新基金项目(CXL2014-10;CXL2014-04)

摘　　要：为抵御Android系统的提权攻击,避免应用在权限传递的时候,造成威胁性的权限泄露,利用Fuzzy-IBE设计一种对权限进行约束的权限管理模型。通过属性对APK的核心模块或者敏感资源进行加密操作,使得在要访问该APK的其余APK中,只有符合特定条件的APK,才能利用系统的私钥恢复出数据,访问原APK应用的资源和模块。通过该模型,可以进一步规划系统资源,规划某一APK应用中敏感数据的访问权限,优化系统和应用自身的模块管理,有效避免提权攻击。To defend against the unauthorized access of Android system resource and make sure the sensitive permission without being leaked from one app to another,apermission agent model based on the Fuzzy-IBE was designed.The attribute was altered from Android application,using different attributes to encrypt the important algorithm or valuable resource to make sure that only when the condition was met could the sink application recover the data by using the decrypt key assigned by the source application and touch the core part of the source application.This model makes good use of the system resource,it optimizes the management of resource belonging to APK itself,and it builds an access control system for application,which avoids the unauthorized access effectively.

关 键 词：提权攻击 隐私保护 信息安全 模糊身份加密 权限管理 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]