Android complex information flow analysis method based on communicating sequential process

Zhanhui YUAN; Zhi YANG; Hongqi ZHANG; Shuyuan JIN; Xuehui DU

doi:10.11959/j.issn.2096-109x.2021086

您当前的位置：

首页 >

文章列表页 >

Android complex information flow analysis method based on communicating sequential process

Papers | 更新时间：2024-06-03

- Android complex information flow analysis method based on communicating sequential process
- Chinese Journal of Network and Information Security Vol. 7, Issue 5, Pages: 156-168(2021)
- 作者机构：
  
  1. 信息工程大学，河南郑州 450001
  2. 中山大学，广东广州 510006
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2021086
  CLC： TP309
- Online First：2021-10，
  
  Published：15 October 2021
- 稿件说明：
移动端阅览
Zhanhui YUAN, Zhi YANG, Hongqi ZHANG, et al. Android complex information flow analysis method based on communicating sequential process[J]. Chinese Journal of Network and Information Security, 2021, 7(5): 156-168.
DOI：

Zhanhui YUAN, Zhi YANG, Hongqi ZHANG, et al. Android complex information flow analysis method based on communicating sequential process[J]. Chinese Journal of Network and Information Security, 2021, 7(5): 156-168. DOI： 10.11959/j.issn.2096-109x.2021086.

摘要

Android 隐私泄露问题日益严重，信息流分析是发现隐私泄露的一种主要方法。传统信息流分析方法以单一可达性分析为主，难以分析复杂信息流。提出一种基于通信顺序进程的信息流分析方法，建立应用程序行为的形式化模型，从而全面刻画程序信息流行为。基于进程迹等价分析方法能够自动化验证信息流关联、信息流约束等复杂信息流问题，进而判断是否存在敏感信息泄露。实验表明，所提方法能够达到90.99%的准确率。

Abstract

Android privacy leak problem is becoming more and more serious.Information flow analysis is a main method to find privacy leak.Traditional information flow analysis methods mainly focus on single accessibility analysis

which is difficult to analyze complex information flow.An information flow analysis method based on communication sequence process was proposed.The formal model of application behavior was established

which can fully describe the information flow of program.The process trace equivalence analysis method could automatically verify complex information flow problems such as information flow association and information flow constraints.This method could detect whether the application program leaks sensitive information.Experimental results show that the accuracy of the proposed method can reach 90.99%.

关键词

Keywords

references

HOARE C A R . Communicating sequential processes [M ] . NJ,USA : Prentice Hall , 1985 .

ENCK W , GILBERT P , CHUN B G , et al . TaintDroid:an information-flow tracking system for realtime privacy monitoring on smartphones [J ] . ACM Transactions on Computer Systems , 2010 , 57 ( 3 ): 393 - 407 .

VACHHARAJANI N , BRIDGES M J , CHANG J , et al . RIFLE:an architectural framework for user-centric information-flow security [C ] // Proceedings of 37th International Symposium on Microarchitecture (MICRO-37'04) . 2004 : 243 - 254 .

BANERJEE S , DEVECSERY D , CHEN P M , et al . Iodine:fast dynamic taint tracking using rollback-free optimistic hybrid analysis [C ] // Proceedings of 2019 IEEE Symposium on Security and Privacy (SP) . 2019 : 490 - 504 .

ZHANG M , YIN H . Efficient,context-aware privacy leakage confinement for android applications without firmware modding [C ] // Proceedings of the 9th ACM Symposium on Information,Computer and Communications Security . 2014 : 259 - 270 .

JIA Y J , CHEN Q A , WANG S Q , et al . ContexIoT:towards providing contextual integrity to appified IoT platforms [C ] // Proceedings of 2017 Network and Distributed System Security Symposium . 2017 .

ZONG P , LV T , WANG D , et al . FuzzGuard:filtering out unreachable inputs in directed grey-box fuzzing through deep learning [C ] // Proceedings of 29th USENIX Security Symposium (USENIX-SS'20) . 2020 .

SHE D D , CHEN Y Z , SHAH A , et al . Neutaint:efficient dynamic taint analysis with neural networks [C ] // Proceedings of 2020 IEEE Symposium on Security and Privacy (SP) . 2020 : 1527 - 1543 .

NGUYEN-TUONG A , GUARNIERI S , GREENE D , et al . Automatically hardening web applications using precise tainting [M ] // Security and Privacy in the Age of Ubiquitous Computing . Boston,MA : Springer US , 2005 : 295 - 307 .

NEWSOME J , SONG D . Dynamic taint analysis for automatic detection,analysis,and signature generation of exploits on commodity software [C ] // Proceedings of the Network and Distributed System Secu-rity Symposium (NDSS '05) . 2005 .

KONG J F , ZOU C C , ZHOU H Y . Improving software security via runtime instruction-level taint checking [C ] // Proceedings of the 1st Workshop on Architectural and System Support for Improving Software Dependability . 2006 : 18 - 24 .

HALDAR V , CHANDRA D , FRANZ M . Dynamic taint propagation for Java [C ] // Proceedings of 21st Annual Computer Security Applications Conference (ACSAC'05) . 2005 :311.

VOGT P , NENTWICH F , JOVANOVIC N , et al . Cross site scripting prevention with dynamic data tainting and static analysis [C ] // Proceedings of the Network and Distributed System Security Symposium (NDSS '07) . 2007 .

CABALLERO J , POOSANKAM P , MCCAMANT S , et al . Input generation via decomposition and restitching:finding bugs in malware [C ] // Proceedings of the 17th ACM Conference on Computer and Communications Security . 2010 : 413 - 425 .

ENCK W , GILBERT P , CHUN B G , et al . TaintDroid:an information-flow tracking system for realtime privacy monitoring on smartphones [C ] // Proceedings of the 9th USENIX Symposium on Operating Systems Design and Implementation . 2019 : 393 - 407 .

ZHU D Y , JUNG J , SONG D , et al . TaintEraser [J ] . ACM SIGOPS Operating Systems Review , 2011 , 45 ( 1 ): 142 - 154 .

KANG M G , MCCAMANT S , POOSANKAM P , et al . DTA++:dynamic taint analysis with targeted control-flow propagation [C ] // Proceedings of the Network and Distributed System Security Symposium (NDSS '11) . 2011 .

ARZT S , RASTHOFER S , FRITZ C , et al . FlowDroid:precise context,flow,field,object-sensitive and lifecycle-aware taint analysis for Android Apps [C ] // Proceedings of the 35th ACM SIGPLAN Conference on Programming Language Design and Implementation . 2014 : 259 - 269 .

WEI F G , ROY S , OU X M , et al . Amandroid:a precise and general inter-component data flow analysis framework for security vetting of Android Apps [C ] // Proceedings of the ACM Conference on Computer and Communications Security . 2014 : 1329 - 1341 .

LI L , BARTEL A , BISSYANDÉ T F ,, et al . IccTA:detecting inter-component privacy leaks in android Apps [C ] // Proceedings of 2015 IEEE/ACM 37th IEEE International Conference on Software Engineering . 2015 : 280 - 291 .

BIANCHI A , CORBETTA J , INVERNIZZI L , et al . What the App is that? Deception and countermeasures in the android user interface [C ] // Proceedings of 2015 IEEE Symposium on Security and Privacy . 2015 : 931 - 948 .

ZHAO Q C , ZUO C S , DOLAN-GAVITT B , et al . Automatic uncovering of hidden behaviors from input validation in mobile Apps [C ] // Proceedings of 2020 IEEE Symposium on Security and Privacy (SP) . 2020 : 1106 - 1120 .

SONG F , TOUILI T . Model-checking for android malware detection [M ] // Programming Languages and Systems . Cham : Springer International Publishing , 2014 : 216 - 235 .

BAI G D , YE Q Q , WU Y Z , et al . Towards model checking Android applications [J ] . IEEE Transactions on Software Engineering , 2018 , 44 ( 6 ): 595 - 612 .

MERCALDO F , NARDONE V , SANTONE A , et al . Ransomware steals your phone.formal methods rescue it [M ] // Formal Techniques for Distributed Objects,Components,and Systems . Cham : Springer International Publishing , 2016 : 212 - 221 .

MERCALDO F , NARDONE V , SANTONE A , et al . Download malware? No,thanks:how formal methods can block update attacks [C ] // Proceedings of the 4th FME Workshop on Formal Methods in Software Engineering . 2016 : 22 - 28 .

BATTISTA P , MERCALDO F , NARDONE V , et al . Identification of android malware families with model checking [C ] // Proceedings of the 2nd International Conference on Information Systems Security and Privacy . 2016 : 542 - 547 .

CANFORA G , MARTINELLI F , MERCALDO F , et al . LEILA:formal tool for identifying mobile malicious behaviour [J ] . IEEE Transactions on Software Engineering , 2019 , 45 ( 12 ): 1230 - 1252 .

MILNER R . Communication and concurrency [M ] . Prentice Hall , 1989 .

BARBUTI R , DE FRANCESCO N , SANTONE A , et al . Selective mu-calculus and formula-based equivalence of transition systems [J ] . Journal of Computer and System Sciences , 1999 , 59 ( 3 ): 537 - 556 .

SURHONE L M , TENNOE M T , HENSSONOW S F , et al . Jimple [M ] . Betascript Publishing , 2010 .

SHEN F , VECCHIO J D , MOHAISEN A , et al . Android malware detection using complex-flows [C ] // Proceedings of IEEE Transactions on Mobile Computing . 2017 : 1231 - 1245 .

Views

491

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Hierarchical multi-device authentication and key agreement protocol for industrial IoT

Security analysis of the RSSP-II protocol and a novel security enhancement approach

Classified risk assessment method of Android application based on multi-factor clustering selection

Mining behavior pattern of mobile malware with convolutional neural network

Android malware detection method based on deep neural network

Related Author

SU Chunhua

LIU Chunyan

FENG Tao

WU Yi

SHI Jianming

WU Yi

TIE Xiaoping

FENG Tao

Related Institution

School of Computer and Communication, Lanzhou University of Technology

School of Economics and Management, Lanzhou University of Technology

Division of Computer Science, University of Aizu

School of Computer and Communication Lanzhou University of Technology

College of Cryptogram Engineering,Information Engineering University

⁰