Container-Based Privacy Preserving Scheme for Android Applications  

作　　者：CUI Haoliang SHAO Shuai NIU Shaozhang ZHANG Wen YUAN Yang 

机构地区：[1]Beijing Key Laboratory of Intelligent Telecommunication Software and Multimedia,Beijing University of Posts and Telecommunications,Beijing 100876,China [2]China Information Technology Security Evaluation Center,Beijing 100088,China

出　　处：《Chinese Journal of Electronics》2020年第4期731-737,共7页电子学报（英文版）

基　　金：supported by the National Natural Science Foundation of China(No.U1536121,No.61370195)。

摘　　要：An application layer privacy data protection scheme combining dynamic and static analysis is proposed.Android component life cycle and system calls are first studied,and the taint propagation path under the cross-component scenario in static analysis is optimized.Based on the static analysis,a privacy preserving container is designed and implemented on both the Framework layer and the Native layer of Android.The scheme generates a privacy protection policy file by constructing leakage paths for privacy data propagation in Android applications,and monitors privacy leakage in the running environment of the target application according to the policy file.Experiments show that the proposed scheme can effectively protect user privacy while running third-party applications.

关 键 词：Privacy preserving CONTAINER Taint tracking 

分 类 号：TP311.56[自动化与计算机技术—计算机软件与理论] TP309[自动化与计算机技术—计算机科学与技术]