Classified risk assessment method of Android application based on multi-factor clustering selection

Fan CHAO; Zhi YANG; Xuehui DU; Bing HAN

doi:10.11959/j.issn.2096-109x.2021023

您当前的位置：

首页 >

文章列表页 >

Classified risk assessment method of Android application based on multi-factor clustering selection

Papers | 更新时间：2024-06-03

- Classified risk assessment method of Android application based on multi-factor clustering selection
- Chinese Journal of Network and Information Security Vol. 7, Issue 2, Pages: 161-173(2021)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2021023
  CLC： TP309.2
- Online First：2021-04，
  
  Published：15 April 2021
- 稿件说明：
移动端阅览
Fan CHAO, Zhi YANG, Xuehui DU, et al. Classified risk assessment method of Android application based on multi-factor clustering selection[J]. Chinese Journal of Network and Information Security, 2021, 7(2): 161-173.
DOI：

Fan CHAO, Zhi YANG, Xuehui DU, et al. Classified risk assessment method of Android application based on multi-factor clustering selection[J]. Chinese Journal of Network and Information Security, 2021, 7(2): 161-173. DOI： 10.11959/j.issn.2096-109x.2021023.

摘要

大多数现有的Android应用程序风险评估根据经验直接指定因素的权重，通过统计少量因素的使用频率来计算安全风险。提出一种新的Android应用风险评估方法，能够同时提供定量和定性评估。该方法融合系统权限、API调用、Intent Filter的action属性以及数据流等多种风险因素，基于因素的风险分类与加成进行风险赋值，基于层次聚类对因素子集进行权重分配。实验表明，评估结果能够有效地反映Android应用程序的真实安全风险。

Abstract

Most existing risk assessments of Android applications directly assign weights to factors according to experience

and calculate security risks by counting the frequency statistics of few factors.A new method for risk assessment of Android applications is proposed

which can provide both quantitative and qualitative assessment.This method integrates multiple risk factors such as system permissions

API calls

the action properties of Intent Filter

and data flow.The risks of factors are assigned based on their risk classification and addition

and the weights of factor subsets are distributed based on hierarchical clustering.Experiments show that the assessment results can effectively reflect the real security risks of Android applications.

关键词

Keywords

references

PENG H , GATES C , SARMA B , et al . Using probabilistic generative models for ranking risks of Android Apps [C ] // The 19th ACM Conference on Computer and Communications Security (CCS) . 2012 : 241 - 252 .

徐君锋 , 王嘉捷 , 朱克雷 , 等 . 基于AHP的安卓应用安全信用指数度量方法 [J ] . 清华大学学报(自然科学版) , 2018 , 58 ( 2 ): 131 - 136 .

XU J F , WANG J J , ZHU K L , et al . Credit index measurement method for Android application security based on AHP [J ] . Journal of Tsinghua University(Science and Technology) , 2018 , 58 ( 2 ): 131 - 136 .

RAHMAN A , PRADHAN P , PARTHO A , et al . Predicting Android application security and privacy risk with static code metrics [C ] // 2017 IEEE International Conference on Mobile Software Engineering and Systems . 2017 : 149 - 153 .

DINI G , MARTINELLI F , MATYEUCCI I , et al . Risk analysis of Android applications:a user-centric solution [J ] . Future Generation Computer Systems , 2018 , 80 : 505 - 518 .

张贤贤 . 安卓应用隐私评分技术的研究与实现 [D ] . 北京:北京邮电大学 , 2018 .

ZHANG X X . Research and implementation of Android application privacy rating technology [D ] . Beijing:Beijing University of Posts and Telecommunications , 2018 .

李舟军 , 吴春明 , 王啸 . 基于沙盒的 Android 应用风险行为分析与评估 [J ] . 清华大学学报(自然科学版) , 2016 , 56 ( 5 ): 453 - 460 .

LI Z J , WU C M , WANG X . Analysis and assessment of Android application’s risk behavior based on sandbox [J ] . Journal of Tsinghua University (Science and Technology) , 2016 , 56 ( 5 ): 453 - 460 .

余小秋 . 基于行为分析的 Android 应用程序安全评估技术研究与系统设计 [D ] . 北京:北京邮电大学 , 2015 .

YU X Q . The research and system design of Android application's safety assessment based on behavior analysis [D ] . Beijing:Beijing University of Posts and Telecommunications , 2015 .

卜同同 , 曹天杰 . 基于权限的Android应用风险评估方法 [J ] . 计算机应用 , 2019 , 39 ( 1 ): 131 - 135 .

BU T T , CAO T J . Risk assessment method of Android application based on permission [J ] . Journal of Computer Applications , 2019 , 39 ( 1 ): 131 - 135 .

王家琰 . Android应用软件安全检测与风险评估方法研究 [D ] . 郑州:战略支援部队信息工程大学 , 2018 .

WANG J Y . Research on Android application security detection and risk assessment method [D ] . Zhengzhou:Information Engineering University , 2018 .

黄心依 , 曾凡平 . 基于多重对应分析的Android应用安全等级评估 [J ] . 电子技术 , 2016 , 8 ( 18 ): 72 - 78 .

HUANG X Y , ZENG F P . The security level assessment model for Android application based on multiple correspondence analysis [J ] . Electronic Technology , 2016 , 8 ( 18 ): 72 - 78 .

魏娟 . Android应用风险评估系统的设计与实现 [D ] . 成都:电子科技大学 , 2015 .

WEI J . The design and implementation of application risk assessment system based on Android [D ] . Chengdu:University of Electronic Science and Technology of China , 2015 .

JING Y , AHN G J , ZHAO Z , et al . RiskMon:Continuous and automated risk assessment of mobile applications [C ] // The 4th ACM Conference on Data and Application Security and Privacy . 2014 : 99 - 110 .

PANDITA R , XIAO X , YANG W , et al . WHYPER:Towards automating risk assessment of mobile applications [C ] // The 22th USENIX Security Symposium . 2013 : 527 - 542 .

肖智婕 . 面向种群的Android安全风险评估和恶意应用检测 [D ] . 武汉:武汉科技大学 , 2019 .

XIAO Z J . Population-based Android security risk assessment and malicious application detection [D ] . Wuhan:Wuhan University of Science and Technology , 2019 .

孟小峰 , 朱敏杰 , 刘俊旭 . 基于Android权限机制的应用安全检测方法 [J ] . 信息安全研究 , 2019 , 5 ( 9 ): 778 - 788 .

MENG X F , ZHU M J , LIU J X . Quantitative research on privacy risk of large-scale mobile users [J ] . Journal of Information Security Research , 2019 , 5 ( 9 ): 778 - 788 .

中国互联网协会反网络病毒联盟 . 移动互联网恶意代码描述规范 [R ] . 2011 .

Anti Network-Virus Alliance of China . Specification for mobile Internet malicious code [R ] . 2011 .

DESNOS A . Androguard documentation,release 3.3.5 [R ] . 2019 .

ARZT S , RASTHOFER S , FRITZ C , et al . FlowDroid:precise context,flow,field,object-sensitive and lifecycle-aware taint analysis for Android apps [C ] // The 35th ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI) . 2014 : 259 - 269 .

GB/T 20984-2007,信息安全技术信息安全风险评估规范 [S ] .

GB/T 20984-2007,Information security technology-risk assessment specification for information security [S ] .

周志华 . 机器学习 [M ] . 北京 : 清华大学出版社 , 2016 .

ZHOU Z H . Machine learning [M ] . Beijing : Tsinghua University Press , 2016 .

ZHOU Y J , JIANG X X . Dissecting Android malware:characterization and evolution [C ] // The 33rd IEEE Symposium on Security and Privacy (Oakland) . 2012 : 95 - 109 .

GoogleGroups . VirusTotal [EB ] .

Views

583

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Android malware detection method based on deep neural network

AI-based risk assessment and early warning method for futures trading

Automatic generation of AppArmor security policies based on large language models

Survey of optical-based physical domain adversarial attacks and defense

Automated vulnerability discovery method for 5G core network protocol

Related Author

Fan CHAO

Zhi YANG

Xuehui DU

Yan SUN

Li Meng

Chang Fei

Wang Junjie

Qiao Yan

Related Institution

China Electronics Standardization Institute

College of Cryptogram Engineering,Information Engineering University

Key Laboratory of Knowledge Engineering with Big Data, Hefei University of Technology

School of Computer Science and Information Engineering, Hefei University of Technology

Huishang Futures Co., Ltd.

⁰