一种动态监测安卓应用程序的方法  

A Method for Dynamically Monitoring Android Applications

作　　者：蒋煦[1] 张慧翔[1] 慕德俊[1] Jiang Xu Zhang Huixiang Mu Dejun(School of Automation, Northwestern Polytechnical University, Xi＇an 710072, China)

机构地区：[1]西北工业大学自动化学院

出　　处：《西北工业大学学报》2016年第6期1074-1081,共8页Journal of Northwestern Polytechnical University

基　　金：国家自然科学基金(61672433)资助

摘　　要：针对安卓应用程序在终端用户未知的情况下获取系统服务的问题,提出了动态监测应用程序获取系统服务的方法。首先,检查应用程序是否存在第三方库,如存在,则检查第三方库中是否存在敏感函数。如果不存在敏感函数,就将应用程序安装到监测系统,实施对应用程序获取系统服务的实时监测。实验结果表明,该方法在能够避免恶意应用程序对监测系统进行破坏的前提下,可以实时监测到应用程序来自Java层或是本地层对系统服务的调用,而且该方法的实现对时间的开销也在可接受的范围内。In order for Android application to acquire system service without knowing their terminal user,we proposed the dynamic monitoring method. First,we monitor whether the Android applications have the third libraries;if yes,we monitor whether the third libraries have sensitive function. If the sensitive function do not exist,the Android applications are installed into a certain Android system whose call function has been hooked,thus monitoring in real time the applications＇ acquisition of system services. The experimental results show that the dynamic monitoring method can monitor the applications＇ acquisition of their system services called by both the Java layer and the local layer under the precondition that the damage to the monitoring system by an ill-intentioned application can be avoided. Besides,the overhead of the dynamic monitoring method for Android applications is acceptable.

关 键 词：应用程序编程接口 网络安全 JAVA语言 实时系统 数据安全 第三方库 挂钩子 系统服务调用 Linux 安卓应用程序 动态监测 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]