Research based on the method of Android system active defense without Root permission

Jing-qiang LIU; Bin LI; Li-zhang CHEN; Bin CHEN

doi:10.11959/j.issn.2096-109x.2016.00013

您当前的位置：

首页 >

文章列表页 >

Research based on the method of Android system active defense without Root permission

Papers | 更新时间：2024-06-03

- Research based on the method of Android system active defense without Root permission
- Chinese Journal of Network and Information Security Vol. 2, Issue 1, Pages: 65-73(2016)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2016.00013
  CLC： TP309
- Online First：2016-01，
  
  Published：15 January 2016
- 稿件说明：
移动端阅览
Jing-qiang LIU, Bin LI, Li-zhang CHEN, et al. Research based on the method of Android system active defense without Root permission[J]. Chinese Journal of Network and Information Security, 2016, 2(1): 65-73.
DOI：

Jing-qiang LIU, Bin LI, Li-zhang CHEN, et al. Research based on the method of Android system active defense without Root permission[J]. Chinese Journal of Network and Information Security, 2016, 2(1): 65-73. DOI： 10.11959/j.issn.2096-109x.2016.00013.

摘要

摘要：为解决Android手机获取Root权限系统安全性的降低，非Root授权下Android手机安全应用防护效果不理想的一系列问题，研究了 ART 运行时工作原理、Java 反射机制和 AOP 原理，设计验证了一套免Root主动防御机制，避免了传统防护应用在系统内核层Hook系统关键函数需要Root授权带来的安全问题以及在应用层调用API效果不理想的现状，实现了对手机应用的敏感行为拦截，能够达到增强Android手机防护的效果。

Abstract

In order to solve the problem that the system security is reduced through getting Root permission and that the security of Android smartphone is not effective without Root permission

the working principle of ART

the Java reflection mechanism and AOP principle were studied. The new mechanism was designed and implemented to avoid the security problem caused by the traditional protection application of Hooking system function in the kernel layer and the limitations with calling API in the application layer ineffectively. The interception of sensitive behavior and the protection of smartphone were both achieved.

关键词

Keywords

references

腾讯移动安全实验室2015年第三季度手机安全报告 [EB/OL ] . ( 2015 - 11 - 03 ). http://m.qq.com/security_lab/news_detail_335.html http://m.qq.com/security_lab/news_detail_335.html .

Mobile security report of Tencent mobile security laboratory in 2015, third quarter [EB/OL ] . ( 2015 - 11 - 03 ). http://m.qq.com/security_lab/news_detail_335.html http://m.qq.com/security_lab/news_detail_335.html .

李挺 , 董航 , 袁春阳 , 等 . 基于Dalvik指令的Android恶意代码特征描述及验证 [J ] . 计算机研究与发展 , 2014 , 51 ( 7 ): 1458 - 1466 .

LI T , DONG H , YUAN C Y , et al . Description of Android malware feature based on Dalvik instructions [J ] . Journal of Computer Re-search and Development , 2014 , 51 ( 7 ): 1458 - 1466 .

李志 , 单洪 , 马春来 , 等 . 基于攻防图的网络主动防御策略选取研究 [J ] . 计算机应用研究 , 2015 , 32 ( 12 ).

LI Z , SHAN H , MA C L , et al . Network active defense strategy se-lection based on attack-defense graph [J ] . Application Research of Computers , 2015 , 32 ( 12 ).

李淑民 . Android手机隐私泄露研究 [J ] . 软件 , 2015 ( 2 ): 69 - 72 .

LI S M . Research on privacy leakage of Android smart phones [J ] . Computer Engineering ＆ Software , 2015 ( 2 ): 69 - 72 .

吴茂林 . 微信红包折射手机安全防护软肋 [J ] . 通信世界 , 2015 ( 6 ): 17 .

WU M L . We Chat ked envelope reflects a soft soft spot of mobile security protection [J ] . Communications World , 2015 ( 6 ): 17 .

SANZ B , SANTOS I , LAORDEN C , et al . PUMA: permission usage to detect malware in Android [C ] // The 5th International Con-ference on Computational Intelligence in Security for Information Systems (CISIS’02). Berlin: Springer ,c 2103 : 289 - 298 .

FELT A P , CHIN E , HANNA S , et al . Android permissions demys-tified [C ] // The 18th ACM Conference on Computer and Communi-cations Security, New York . c 2011 : 627 - 638 .

DESNOS A . Reverse engineering, malware and goodware analysis of Android applications…and more (ninja!) [EB/OL ] . ( 2013 - 03 - 26 ). https://github.com/androguard/androguard https://github.com/androguard/androguard .

CILIBRASI R , VITANYI P M B . Clustering by compression [J ] . IEEE Transactions on Information Theory , 2005 , 51 ( 4 ): 1523 - 1545 .

南秦博 , 慕德俊 , 侯艳艳 . Android 系统恶意程序检测技术研究 [J ] . 现代电子技术 , 2015 ( 12 ): 47 - 50 .

NAN Q B , MU D J , HOU Y Y . Research of malicious program de-tection technology for Android system [J ] . Modern Electronics Technique , 2015 ( 12 ): 47 - 50 .

CHRISTODORESCU M , JHA S , SESHIA S A , et al . Seman-tics-aware malware detection [C ] // The 2005 IEEE Symposium on Security and Privacy (Oakland’05) . c 2005 : 32 - 46 .

王蕊 , 冯登国 , 杨轶 , 等 . 基于语义的恶意代码行为特征提取及检测方法 [J ] . 软件学报 , 2012 , 23 ( 2 ): 378 - 393 .

WANG R , FENG D G , YANG Y , et al . Semantics-based malware behavior signature extraction and detection method [J ] . Journal of Software , 2012 , 23 ( 2 ): 378 - 393 .

DESNOS A . Android: static analysis using similarity dis-tance [C ] // The 45th Hawaii International Conference on System Sciences(HICSS) ,c 2012 : 5394 - 5403 .

杨超 , 刘文庆 , 张伟 , 等 . 基于利用方式的Android Root漏洞分析 [J ] . 计算机科学 , 2014 , 41 ( S1 ): 343 - 346 .

YANG C , LIU W Q , ZHANG W , et al . Utilization pattern based Android Root vulnerability analysis [J ] . Computer Science , 2014 , 41 ( S1 ): 343 - 346 .

卢文杰 . 网络安全主动防御技术 [J ] . 网络安全技术与应用 , 2015 ( 4 ): 148 .

LU W J . Network security active defense technology [J ] . Network Security Technology ＆ Application , 2015 ( 4 ): 148 .

孙晓奇 . 面向多国发布的手机软件定制系统的设计与实现 [D ] . 北京：中国科学院大学 , 2014 .

SUN X Q . Design and implementation of software custom ization for global released mobile phone [D ] . Beijing: University of Chi-nese Academy of Sciences , 2014 .

Views

4891

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Research on Android malware detection based on permission and behavior

Related Author

Xiao-min ZHANG

Jing LUI

Jun-xi ZHUANG

Ying-xu LAI

Related Institution

Faculty of Information Technology, Beijing University of Technology

Beijing Key Laboratory of Trusted Computing,Beijing University of Technology

National Engineering Laboratory for Critical Technologies of Information Security Classified Protection,Beijing University of Technology

⁰