完整的安卓系统框架层调用图生成方法  

Complete Android framework call graph generation method

作　　者：代蕊蕊 王雅哲[1] DAI Ruirui;WANG Yazhe(Beijing Engineering Laboratory of the Internet Intelligent Device Sercurity,Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100195,China;School of Cyber Security,University of Chinese Academy of Sciences,Beijing 100049,China)

机构地区：[1]中国科学院信息工程研究所互联网智能设备信息安全北京市工程实验室,北京100195 [2]中国科学院大学网络空间安全学院,北京100049

出　　处：《智能计算机与应用》2018年第3期15-20,共6页Intelligent Computer and Applications

摘　　要：目前安卓系统框架层调用图静态分析局限在Java框架层,忽略了C++框架层中的多种媒体服务和传感器服务,基于调用图的安卓系统安全分析完整性较差。本文基于对安卓系统框架层机制和源码的深入分析,提出了一种完整的安卓系统框架层调用图生成方法,主要包括Java框架层调用图、C++框架层调用图和JNI连接生成完整调用图三个部分,重点分析了远程进程调用、消息处理机制和Java本地接口处的调用链。At present,Android framework call graph static analysis is limited to the Java framework layer,ignoring the media services and sensor services in the C ＋＋ framework layer.The safety analysis of the Android system based on the call graph is also less complete.Based on the in-depth analysis of the Android system framework mechanism and source code,the paper presents a complete Android framework call graph generation method.It includes three parts,which are：the Java framework call graph,C ＋＋framework call graph and JNI connection for complete call graph.After that,the paper analyzes in detail the call chain about remote process call,message handler and Java Native Interface.

关 键 词：安卓框架层 调用图 远程进程调用 消息处理机制 JAVA本地接口 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]