基于HTTP数据包分析的安卓隐私泄露检测机制  

Privacy Leak Detection Scheme on Android Based on HTTP Packet Analysis

作　　者：黄锐聪 庄毅[1] HUANG Rui-cong;ZHUANG Yi(College of Computer Science and Technology,Nanjing University of Aeronautics and Astronautics,Nanjing 211106,China)

机构地区：[1]南京航空航天大学计算机科学与技术学院,江苏南京211106

出　　处：《软件导刊》2021年第1期199-203,共5页Software Guide

基　　金：国家自然科学基金项目(61572253);航空科学基金项目(2016ZC52030)。

摘　　要：安卓应用恶意泄露隐私最常使用的手段是基于HTTP协议的网络通信,通过该方法进行隐私泄露比例高达96.2%。针对安卓系统隐私泄露检测需求,提出基于HTTP数据包分析的安卓隐私泄露检测机制,捕获与过滤安卓应用程序运行中产生的网络流量,使用键值对提取及隐私信息匹配等方法判断该应用是否泄露隐私数据。实验结果表明,该方法比已有方法检测准确率更高,误报率更低。The HTTP protocol-based network communication is the most commonly used method for Android malicious applications to leak privacy,and the proportion of applications that leak privacy through this method reaches 96.2%.Aiming at the privacy leak detec⁃tion problem of Android,this paper proposes an Android privacy leak detection scheme based on HTTP packet analysis.First,the net⁃work traffic generated by the Android application is captured and filtered.Then key-value pair extraction and privacy information matching are adopted to determine whether the application has leaked private data during operation.Experimental results show that the proposed method has higher detection accuracy and lower false alarm rate,compared to the existing methods.

关 键 词：安卓系统 隐私泄露检测 数据包分析 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]