基于静态分析的Android应用事件输入生成方法

叶益林; 周振吉; 洪征; 颜慧颖; 吴礼发

doi:10.11959/j.issn.2096-109x.2017.00169

您当前的位置：

首页 >

文章列表页 >

基于静态分析的Android应用事件输入生成方法

学术论文 | 更新时间：2024-06-03

- 基于静态分析的Android应用事件输入生成方法
- Static-analysis-based event input generation approach for Android application
- 网络与信息安全学报 2017年3卷第6期页码：21-32
- 作者机构：
- 作者简介：
  
  [ "叶益林（1987-），男，江西九江人，解放军理工大学博士生，主要研究方向为移动应用安全。" ]
  [ "周振吉（1984-），男，江苏连云港人，博士，解放军理工大学讲师，主要研究方向包含协议逆向、移动应用安全。" ]
  [ "洪征（1978-），男，江西上饶人，博士，解放军理工大学副教授，主要研究方向为协议逆向、网络安全。" ]
  [ "颜慧颖（1993-），女，江西吉安人，解放军理工大学硕士生，主要研究方向为移动应用安全。" ]
  [ "吴礼发（1968-），男，湖北仙桃人，解放军理工大学教授、博士生导师，主要研究方向包含移动应用安全、协议逆向、网络安全。" ]
- 基金信息：
  
  江苏省自然科学基金资助项目;The Natural Science Foundation of Jiangsu Province(BK20131069)
- DOI：10.11959/j.issn.2096-109x.2017.00169
  中图分类号： TP393
- 网络首发：2017-06，
  
  纸质出版：2017-06-15
- 稿件说明：
移动端阅览
叶益林, 周振吉, 洪征, 等. 基于静态分析的Android应用事件输入生成方法[J]. 网络与信息安全学报, 2017,3(6):21-32.

Yi-lin YE, Zhen-ji ZHOU, Zheng HONG, et al. Static-analysis-based event input generation approach for Android application[J]. Chinese Journal of Network and Information Security, 2017, 3(6): 21-32.
叶益林, 周振吉, 洪征, 等. 基于静态分析的Android应用事件输入生成方法[J]. 网络与信息安全学报, 2017,3(6):21-32. DOI： 10.11959/j.issn.2096-109x.2017.00169.

Yi-lin YE, Zhen-ji ZHOU, Zheng HONG, et al. Static-analysis-based event input generation approach for Android application[J]. Chinese Journal of Network and Information Security, 2017, 3(6): 21-32. DOI： 10.11959/j.issn.2096-109x.2017.00169.

摘要

提出了一种基于静态分析的Android应用动态分析事件输入生成方法。以组件间调用图和单个组件内部系统依赖图为基础，提取组件内部安全相关回调方法依赖的事件输入，并设计了一种事件输入算法，自动生成Android应用运行时依赖的事件输入。实验结果表明，相比已有工作，所提方法能够达到更高的权限方法和基本组件覆盖率，覆盖更多安全相关的执行路径，有助于动态分析过程中收集更多安全相关的运行时行为。

Abstract

A static-analysis-based event input generation approach for Android applications was proposed.Based on the inter-component call graph and the system dependence graph of single component

the event inputs that security-related callbacks depend on were extracted.Furthermore

an event input algorithm was designed to automatically generate event inputs according to Android application runtime.The experimental results show that the proposed method can achieve higher coverage of permission methods and basic components

which can cover more security-related execution paths and help to collect more security-related runtime behaviors during the process of dynamic analysis.

关键词

Keywords

references

XIA M , GONG L , LYU Y , et al . Effective real-time android application auditing [C ] // IEEE Symposium on Security and Privacy . 2015 : 899 - 914 .

BIANCHI A , FRATANTONIO Y , KRUEGEL C , et al . NJAS:sandboxing unmodified applications in non-rooted devices running stock Android [C ] // ACM CCS Workshop on Security and Privacy in Smartphones and Mobile Devices . 2015 : 27 - 38 .

BACKES M , BUGIEL S , HAMMER C , et al . Boxify:full-fledged app sandboxing for stock android [C ] // Usenix Conference on Security Symposium . 2015 : 691 - 706 .

AFONSO V M , AMORIM M F D , GRÉGIO A R A , et al . Identifying Android malware using dynamically obtained features [J ] . Journal of Computer Virology and Hacking Techniques , 2015 , 11 ( 1 ): 9 - 17 .

QIU L , ZHANG Z , SHEN Z , et al . AppTrace:dynamic trace on Android devices [C ] // IEEE International Conference on Communications . 2015 : 7145 - 7150 .

Monkey [EB/OL ] . https://developer.android.com/studio/test/monkey.html https://developer.android.com/studio/test/monkey.html .

MonkeyRunner [EB/OL ] . https://developer.android.com/studio/test/monkeyrunner/ index.html https://developer.android.com/studio/test/monkeyrunner/ index.html .

李必信 , 李宣东 , 郑国梁 . 一种系统依赖图的面向对象扩充方案 [J ] . 软件学报 , 2001 , 12 ( 2 ): 241 - 248 .

LI B X , LI X D , ZHENG G L . An object-oriented extension ap-proach for system dependent graph [J ] . Journal of Software , 2001 , 12 ( 2 ): 241 - 248 .

杜林 , 江海燕 . 计算面向对象程序切片技术研究 [J ] . 山东大学学报(工学版) , 2008 , 38 ( 6 ): 41 - 47 .

DU L , JIANG H Y . Research on slicing technology of object oriented program [J ] . Journal of Shandong University(Engineering Science) , 2008 , 38 ( 6 ): 41 - 47 .

AU K W Y , ZHOU Y F , HUANG Z , et al . PScout:analyzing the Android permission specification [C ] // The ACM Conference on Computer and Communications Security . 2012 : 217 - 228 .

MOURA L D , BJORNER N . Z3:an efficient SMT solver [J ] . Lecture Notes in Computer Science , 2008 , 4963 : 337 - 340 .

Apktool [EB/OL ] . http://www.softpedia.com/get/Programming/Debuggers-Decompilers-Dissasemblers/ ApkTool.shtml http://www.softpedia.com/get/Programming/Debuggers-Decompilers-Dissasemblers/ ApkTool.shtml .

Androguard [EB/OL ] . https://github.com/androguard/androguard https://github.com/androguard/androguard .

CHOI S , BIJOU M , SUN K , et al . API tracing tool for Android-based mobile devices [J ] . International Journal of Information and Education Technology , 2015 , 5 ( 6 ): 460 - 465 .

MACHIRY A , TAHILIANI R , NAIK M . Dynodroid:an input generation system for Android apps [C ] // Joint Meeting on Foundations of Software Engineering . 2013 : 422 - 434 .

HU C , NEAMTIU I . Automating GUI testing for Android applications [C ] // The International Workshop on Automation of Software Test . 2011 : 77 - 83 .

AMALFITANO D , FASOLINO A R , TRAMONTANA P , et al . Using GUI ripping for automated testing of Android applications [C ] // The 27th IEEE/ACM International Conference on Automated Software Engineering,IEEE Computer Society . 2012 : 258 - 261 .

YANG W , PRASAD M R , XIE T . A grey-box approach for automated GUI-model generation of mobile applications [C ] // The International Conference on Fundamental Approaches To Software Engineering . 2013 : 250 - 265 .

Robotium [EB/OL ] . tps://github.com/RobotiumTech/robotium tps://github.com/RobotiumTech/robotium .

CHOI W , NECULA G , SEN K . Guided GUI testing of Android Apps with minimal restart and approximate learning [J ] . ACM Sigplan Notices , 2013 , 48 ( 10 ): 623 - 640 .

AZIM T , NEAMTIU I . Targeted and depth-first exploration for systematic testing of Android Apps [J ] . ACM Sigplan Notices , 2013 , 48 ( 10 ): 641 - 660 .

RASTOGI V , CHEN Y , ENCK W . Appsplayground:automatic security analysis of smartphone applications [C ] // ACM Conference on Data and Application Security and Privacy . 2013 : 209 - 220 .

VEEN V V D . Dynamic analysis of Android malware [J ] . Internet ＆Web Technology Master thesis,VU University Amsterdam , 2013 .

LINDORFER M , NEUGSCHWANDTNER M , WEICHSELBAUM L , et al . ANDRUBIS- -1,000,000 apps later:a view on current Android malware behaviors [C ] // The 3rd International Workshop on Building Analysis Datasets and Gathering Experience Returns for Security,IEEE Computer Society . 2014 : 3 - 17 .

浏览量

2418

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

恶意代码动态分析对抗与反对抗技术综述

基于Android平台并行运算机制的密码运算加速方案

基于程序基因的恶意程序预测技术

Android移动设备边信道隐私推测研究综述

基于API调用的抗混淆Android应用相似性检测方法