一种基于意图的安卓应用安全检测方法研究  

Research on a Method of Security Detection for Android Based on Intent

作　　者：刘玮[1] LIU Wei(Department of Mathematics and Computer,School of Foreign Trade and Business,Chongqing Normal University,Chongqing 401520,China)

机构地区：[1]重庆师范大学涉外商贸学院数学与计算机系,重庆401520

出　　处：《计算机技术与发展》2019年第5期102-106,共5页Computer Technology and Development

基　　金：重庆市教育科学技术研究项目(KJ1501702)

摘　　要：针对目前Android移动应用市场受感染应用逐渐增多,应用软件安全性普遍较低,恶意软件检测难等问题,首先对Android应用的(显式和隐式)意图进行研究,接着对收集众多应用软件的权限和意图进行分析。通过对比Android应用权限发现,Android应用意图信息是识别Android受感染应用程序的一个更有效的特性。然后研究了AndroDialysis框架利用意图检测恶意应用的方法和原理,最后通过对收集的Android应用意图信息进行实验,验证其有效性,实验达到了理想效果。如果将Android意图和安卓权限结合起来进行应用安全分析验证,则有可能进一步提高安卓应用的检测率。该研究能够为移动安全检测提供参考。For the problem of increasing number of malware in current Android application market,the generally low security of application software and the difficulty in detecting malicious software,we first study the (explicit and implicit) intent of Android application,and then analyze the permission and intent information from many Android applications we collect.By comparison,we discover that intent is an effective feature to identify the Android infected application.Then we study the methods and principles of the AndroDialysis framework which is used to malware detection by analysis of the Android intent.Finally we collect the Android application intent information and do experiments to verify its effectiveness,and the experiment achieves ideal results.If Android intent and Android permission are combined to security analysis and validation,it would further improve the detection rate of Android applications.This study can provide reference for Android malware application detection in future.

关 键 词：安卓应用 安全检测 意图 权限 AndroDialysis 

分 类 号：TP301[自动化与计算机技术—计算机系统结构]