Privacy protection system based on Hook for Android

Xiaoyan ZHU; Hui ZHANG; Jianfeng MA

doi:10.11959/j.issn.2096-109x.2018033

您当前的位置：

首页 >

文章列表页 >

Privacy protection system based on Hook for Android

Papers | 更新时间：2024-06-03

- Privacy protection system based on Hook for Android
- Chinese Journal of Network and Information Security Vol. 4, Issue 4, Pages: 38-47(2018)
- 作者机构：
  
  1. 西安电子科技大学通信工程学院，陕西西安 710071
  2. 西安电子科技大学网络与信息安全学院，陕西西安 710071
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2018033
  CLC： TN91
- Online First：2018-04，
  
  Published：15 April 2018
- 稿件说明：
移动端阅览
Xiaoyan ZHU, Hui ZHANG, Jianfeng MA. Privacy protection system based on Hook for Android[J]. Chinese Journal of Network and Information Security, 2018, 4(4): 38-47.
DOI：

Xiaoyan ZHU, Hui ZHANG, Jianfeng MA. Privacy protection system based on Hook for Android[J]. Chinese Journal of Network and Information Security, 2018, 4(4): 38-47. DOI： 10.11959/j.issn.2096-109x.2018033.

摘要

针对Android中恶意应用窃取用户隐私的问题，设计并实现了一个基于Hook技术的隐私保护系统。该系统包括应用分类模块、隐私信息管理模块和共谋攻击管理模块。应用分类模块利用权限特征向量集构建分类模型，对手机上的应用进行分类；隐私信息管理模块利用Hook技术对所有涉及隐私信息的API进行挂钩，通过返回虚假值或者空值，拦截恶意应用获取隐私信息；共谋攻击管理模块同样使用Hook技术，对提供应用间通信的API进行挂钩，当通信双方满足共谋攻击的权限规则，通过返回空值实现拦截双方的通信内容。最后，通过实验验证了该系统的可行性和有效性，并且该系统不需要对Android系统和应用进行修改，占用的内存较小，能够实时拦截窃取隐私的行为。

Abstract

A privacy protection system based on Hook technology was designed and implemented to address the problem of user privacy leakage caused by malicious applications in Android.The system consists of three modules:application classification module

privacy information management module and collusion attack management module.The application classification module constructs classification model by using permission feature vectors and then classifies mobile applications into malicious applications and normal applications.The privacy information management module hooks all privacy-related application programming interfaces (API) based on Hook technology and then intercepts malicious applications by returning false data or empty data.The collusion attack management module hooks all inter-application communication channels and then intercepts corresponding communication contents by using the permission rules of collusion attack.Finally

the proposed privacy protection scheme on Android virtual machine was implemented to prove and its feasibility and effectiveness were proved.In addition

the system can intercept application behaviors of breaching privacy in real time with less memory

which does not need to modify Android system and applications.

关键词

Keywords

references

Gartner . Market share:final PCs,ultramobiles and mobile phones,all countries,4Q17 [R ] . Connecticut:Gartner , 2018 .

GIBLER C , CRUSSELL J , ERICKSON J , et al . AndroidLeaks:automatically detecting potential privacy leaks in android applications on a large scale [J ] . Trust , 2012 , 12 : 291 - 307 .

YANG Z , YANG M . Leakminer:detect information leakage on android with static taint analysis [C ] // 2012 Third World Congress on Software Engineering (WCSE) . 2012 : 101 - 104 .

ARZT S , RASTHOFER S , FRITZ C , et al . Flowdroid:precise context,flow,field,object-sensitive and lifecycle-aware taint analysis for android apps [J ] . ACM Sigplan Notices , 2014 , 49 ( 6 ): 259 - 269 .

ENCK W , GILBERT P , CHUN B G , et al . Taintdroid:an information-flow tracking system for realtime privacy monitoring on smartphones [C ] // The 9th USENIX Conference on Operating Systems Design and Implementation . USENIX Association , 2010 .

HORNYACK P , HAN S , JUNG J , et al . These aren't the droids you're looking for:Retrofitting Android to protect data from imperious applications [C ] // The 18th ACM Conference on Computer and Communications Security . ACM , 2011 : 639 - 652 .

Droidbox [EB/OL ] . http://code.google.com/p/droidbox/ http://code.google.com/p/droidbox/ .

RASTOGI V , QU Z , MCCLURG J , et al . Uranine:real-time privacy leakage monitoring without system modification for Android [J ] . Security and Privacy in Communication Networks , 2015 : 256 - 276 .

YOU W , LIANG B , SHI W , et al . TaintMan:an ART-compatible dynamic taint analysis framework on unmodified and non-rooted Android devices [J ] . IEEE Transactions on Dependable and Secure Computing , 2017 .

YANG Z , YANG M , ZHANG Y , et al . Appintent:Analyzing sensitive data transmission in Android for privacy leakage detection [C ] // 2013 ACM SIGSAC Conference on Computer ＆ Communications Security . ACM , 2013 : 1043 - 1054 .

XIA M , GONG L , LYU Y , et al . Effective real-time android application auditing [C ] // 2015 IEEE Symposium on Security and Privacy (SP) . 2015 : 899 - 914 .

孙博文 , 黄炎裔 , 温俏琨 , 等 . 基于静态多特征融合的恶意软件分类方法 [J ] . 网络与信息安全学报 , 2017 , 3 ( 11 ): 68 - 76 .

SUN B W , HUANG Y Y , WEN Q K , et al . Malware classification method based on static multiple-feature fusion [J ] . Chinese Journal of Network and Information Security , 2017 , 3 ( 11 ): 68 - 76 .

杨欢 , 张玉清 , 胡予濮 , 等 . 基于多类特征的 Android 应用恶意行为检测系统 [J ] . 计算机学报 , 2014 , 37 ( 1 ): 15 - 27 .

YANG H , ZHANG Y Q , HU Y P , et al . A malware behavior detection system of Android applications based on multi-class features [J ] . Chinese Journal of Computers , 2014 , 37 ( 1 ): 15 - 27 .

TALHA K A , ALPER D I , AYDIN C . APK auditor:permission-based Android malware detection system [J ] . Digital Investigation , 2015 , 13 : 1 - 14 .

BHANDARI S , LAXMI V , ZEMMARI A , et al . Intersection automata based model for android application collusion [C ] // 2016 IEEE 30th International Conference on Advanced Information Networking and Applications (AINA) . 2016 : 901 - 908 .

BUGIEL S , DAVI L , DMITRIENKO A , et al . Xmandroid:a new android evolution to mitigate privilege escalation attacks [R ] . Technical Report , 2011 .

BUGIEL S , DAVI L , DMITRIENKO A , et al . Towards taming privilege-escalation attacks on Android [C ] // NDSS . 2012 :19.

BLASCO J , CHEN T M . Automated generation of colluding Apps for experimental research [J ] . Journal of Computer Virology and Hacking Techniques , 2017 : 1 - 12 .

Views

2861

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Bidirectional privacy authorization for large models based on private set intersection

Research on searchable encryption scheme based on enhanced PIR

Differential privacy protection method for localization of ADS-B message positioning data oriented to LBS

FL-IoV: comprehensive intrusion detection method for internet of vehicles based on federated learning

Secure aggregation for semi-decentralized federated learning under heterogeneous data

Related Author

YANG Shuai

HAN Yiliang

WU Xuguang

FENG Haokang

WANG Yuanyuan

TANG Liang

MA Limin

YANG Hongyu

Related Institution

Key Laboratory of Counter-Terrorism Command Information Engineering of the Ministry of Education, Engineering University of PAP

College of Cryptography Engineering, Engineering University of PAP

College of Computer Science，Beijing Information Science and Technology University

Beijing Academy of Educational Science

School of Computer Science and Technology, Jilin University

⁰