基于通信顺序进程的Android程序复杂信息流分析方法

袁占慧; 杨智; 张红旗; 金舒原; 杜学绘

doi:10.11959/j.issn.2096-109x.2021086

您当前的位置：

首页 >

文章列表页 >

基于通信顺序进程的Android程序复杂信息流分析方法

学术论文 | 更新时间：2024-06-03

- 基于通信顺序进程的Android程序复杂信息流分析方法
- Android complex information flow analysis method based on communicating sequential process
- 网络与信息安全学报 2021年7卷第5期页码：156-168
- 作者机构：
  
  1. 信息工程大学，河南郑州 450001
  2. 中山大学，广东广州 510006
- 作者简介：
  
  [ "袁占慧（1997− ），男，吉林辽源人，信息工程大学硕士生，主要研究方向为移动智能终端的信息流控制与隐私保护" ]
  [ "杨智（1975− ），男，河南开封人，博士，信息工程大学副教授，主要研究方向为操作系统安全、云计算安全、隐私保护" ]
  [ "张红旗（1962− ），男，河北遵化人，博士，信息工程大学教授、博士生导师，主要研究方向为网络安全、风险评估、等级保护和信息安全管理等" ]
  [ "金舒原（1974− ），女，吉林白城人，博士，中山大学教授、博士生导师，主要研究方向为隐私保护、漏洞分析等" ]
  [ "杜学绘（1968− ），女，河南新乡人，博士，信息工程大学教授、博士生导师，主要研究方向为空间信息网络、云计算安全" ]
- 基金信息：
  
  国家自然科学基金;The National Natural Science Foundation of China(62176265);国家自然科学基金;The National Natural Science Foundation of China(61972040)
- DOI：10.11959/j.issn.2096-109x.2021086
  中图分类号： TP309
- 网络首发：2021-10，
  
  纸质出版：2021-10-15
- 稿件说明：
移动端阅览
袁占慧, 杨智, 张红旗, 等. 基于通信顺序进程的Android程序复杂信息流分析方法[J]. 网络与信息安全学报, 2021,7(5):156-168.

Zhanhui YUAN, Zhi YANG, Hongqi ZHANG, et al. Android complex information flow analysis method based on communicating sequential process[J]. Chinese Journal of Network and Information Security, 2021, 7(5): 156-168.
袁占慧, 杨智, 张红旗, 等. 基于通信顺序进程的Android程序复杂信息流分析方法[J]. 网络与信息安全学报, 2021,7(5):156-168. DOI： 10.11959/j.issn.2096-109x.2021086.

Zhanhui YUAN, Zhi YANG, Hongqi ZHANG, et al. Android complex information flow analysis method based on communicating sequential process[J]. Chinese Journal of Network and Information Security, 2021, 7(5): 156-168. DOI： 10.11959/j.issn.2096-109x.2021086.

摘要

Android 隐私泄露问题日益严重，信息流分析是发现隐私泄露的一种主要方法。传统信息流分析方法以单一可达性分析为主，难以分析复杂信息流。提出一种基于通信顺序进程的信息流分析方法，建立应用程序行为的形式化模型，从而全面刻画程序信息流行为。基于进程迹等价分析方法能够自动化验证信息流关联、信息流约束等复杂信息流问题，进而判断是否存在敏感信息泄露。实验表明，所提方法能够达到90.99%的准确率。

Abstract

Android privacy leak problem is becoming more and more serious.Information flow analysis is a main method to find privacy leak.Traditional information flow analysis methods mainly focus on single accessibility analysis

which is difficult to analyze complex information flow.An information flow analysis method based on communication sequence process was proposed.The formal model of application behavior was established

which can fully describe the information flow of program.The process trace equivalence analysis method could automatically verify complex information flow problems such as information flow association and information flow constraints.This method could detect whether the application program leaks sensitive information.Experimental results show that the accuracy of the proposed method can reach 90.99%.

关键词

Keywords

references

HOARE C A R . Communicating sequential processes [M ] . NJ,USA : Prentice Hall , 1985 .

ENCK W , GILBERT P , CHUN B G , et al . TaintDroid:an information-flow tracking system for realtime privacy monitoring on smartphones [J ] . ACM Transactions on Computer Systems , 2010 , 57 ( 3 ): 393 - 407 .

VACHHARAJANI N , BRIDGES M J , CHANG J , et al . RIFLE:an architectural framework for user-centric information-flow security [C ] // Proceedings of 37th International Symposium on Microarchitecture (MICRO-37'04) . 2004 : 243 - 254 .

BANERJEE S , DEVECSERY D , CHEN P M , et al . Iodine:fast dynamic taint tracking using rollback-free optimistic hybrid analysis [C ] // Proceedings of 2019 IEEE Symposium on Security and Privacy (SP) . 2019 : 490 - 504 .

ZHANG M , YIN H . Efficient,context-aware privacy leakage confinement for android applications without firmware modding [C ] // Proceedings of the 9th ACM Symposium on Information,Computer and Communications Security . 2014 : 259 - 270 .

JIA Y J , CHEN Q A , WANG S Q , et al . ContexIoT:towards providing contextual integrity to appified IoT platforms [C ] // Proceedings of 2017 Network and Distributed System Security Symposium . 2017 .

ZONG P , LV T , WANG D , et al . FuzzGuard:filtering out unreachable inputs in directed grey-box fuzzing through deep learning [C ] // Proceedings of 29th USENIX Security Symposium (USENIX-SS'20) . 2020 .

SHE D D , CHEN Y Z , SHAH A , et al . Neutaint:efficient dynamic taint analysis with neural networks [C ] // Proceedings of 2020 IEEE Symposium on Security and Privacy (SP) . 2020 : 1527 - 1543 .

NGUYEN-TUONG A , GUARNIERI S , GREENE D , et al . Automatically hardening web applications using precise tainting [M ] // Security and Privacy in the Age of Ubiquitous Computing . Boston,MA : Springer US , 2005 : 295 - 307 .

NEWSOME J , SONG D . Dynamic taint analysis for automatic detection,analysis,and signature generation of exploits on commodity software [C ] // Proceedings of the Network and Distributed System Secu-rity Symposium (NDSS '05) . 2005 .

KONG J F , ZOU C C , ZHOU H Y . Improving software security via runtime instruction-level taint checking [C ] // Proceedings of the 1st Workshop on Architectural and System Support for Improving Software Dependability . 2006 : 18 - 24 .

HALDAR V , CHANDRA D , FRANZ M . Dynamic taint propagation for Java [C ] // Proceedings of 21st Annual Computer Security Applications Conference (ACSAC'05) . 2005 :311.

VOGT P , NENTWICH F , JOVANOVIC N , et al . Cross site scripting prevention with dynamic data tainting and static analysis [C ] // Proceedings of the Network and Distributed System Security Symposium (NDSS '07) . 2007 .

CABALLERO J , POOSANKAM P , MCCAMANT S , et al . Input generation via decomposition and restitching:finding bugs in malware [C ] // Proceedings of the 17th ACM Conference on Computer and Communications Security . 2010 : 413 - 425 .

ENCK W , GILBERT P , CHUN B G , et al . TaintDroid:an information-flow tracking system for realtime privacy monitoring on smartphones [C ] // Proceedings of the 9th USENIX Symposium on Operating Systems Design and Implementation . 2019 : 393 - 407 .

ZHU D Y , JUNG J , SONG D , et al . TaintEraser [J ] . ACM SIGOPS Operating Systems Review , 2011 , 45 ( 1 ): 142 - 154 .

KANG M G , MCCAMANT S , POOSANKAM P , et al . DTA++:dynamic taint analysis with targeted control-flow propagation [C ] // Proceedings of the Network and Distributed System Security Symposium (NDSS '11) . 2011 .

ARZT S , RASTHOFER S , FRITZ C , et al . FlowDroid:precise context,flow,field,object-sensitive and lifecycle-aware taint analysis for Android Apps [C ] // Proceedings of the 35th ACM SIGPLAN Conference on Programming Language Design and Implementation . 2014 : 259 - 269 .

WEI F G , ROY S , OU X M , et al . Amandroid:a precise and general inter-component data flow analysis framework for security vetting of Android Apps [C ] // Proceedings of the ACM Conference on Computer and Communications Security . 2014 : 1329 - 1341 .

LI L , BARTEL A , BISSYANDÉ T F ,, et al . IccTA:detecting inter-component privacy leaks in android Apps [C ] // Proceedings of 2015 IEEE/ACM 37th IEEE International Conference on Software Engineering . 2015 : 280 - 291 .

BIANCHI A , CORBETTA J , INVERNIZZI L , et al . What the App is that? Deception and countermeasures in the android user interface [C ] // Proceedings of 2015 IEEE Symposium on Security and Privacy . 2015 : 931 - 948 .

ZHAO Q C , ZUO C S , DOLAN-GAVITT B , et al . Automatic uncovering of hidden behaviors from input validation in mobile Apps [C ] // Proceedings of 2020 IEEE Symposium on Security and Privacy (SP) . 2020 : 1106 - 1120 .

SONG F , TOUILI T . Model-checking for android malware detection [M ] // Programming Languages and Systems . Cham : Springer International Publishing , 2014 : 216 - 235 .

BAI G D , YE Q Q , WU Y Z , et al . Towards model checking Android applications [J ] . IEEE Transactions on Software Engineering , 2018 , 44 ( 6 ): 595 - 612 .

MERCALDO F , NARDONE V , SANTONE A , et al . Ransomware steals your phone.formal methods rescue it [M ] // Formal Techniques for Distributed Objects,Components,and Systems . Cham : Springer International Publishing , 2016 : 212 - 221 .

MERCALDO F , NARDONE V , SANTONE A , et al . Download malware? No,thanks:how formal methods can block update attacks [C ] // Proceedings of the 4th FME Workshop on Formal Methods in Software Engineering . 2016 : 22 - 28 .

BATTISTA P , MERCALDO F , NARDONE V , et al . Identification of android malware families with model checking [C ] // Proceedings of the 2nd International Conference on Information Systems Security and Privacy . 2016 : 542 - 547 .

CANFORA G , MARTINELLI F , MERCALDO F , et al . LEILA:formal tool for identifying mobile malicious behaviour [J ] . IEEE Transactions on Software Engineering , 2019 , 45 ( 12 ): 1230 - 1252 .

MILNER R . Communication and concurrency [M ] . Prentice Hall , 1989 .

BARBUTI R , DE FRANCESCO N , SANTONE A , et al . Selective mu-calculus and formula-based equivalence of transition systems [J ] . Journal of Computer and System Sciences , 1999 , 59 ( 3 ): 537 - 556 .

SURHONE L M , TENNOE M T , HENSSONOW S F , et al . Jimple [M ] . Betascript Publishing , 2010 .

SHEN F , VECCHIO J D , MOHAISEN A , et al . Android malware detection using complex-flows [C ] // Proceedings of IEEE Transactions on Mobile Computing . 2017 : 1231 - 1245 .

浏览量

491

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于工业物联网的分层多设备认证密钥协商协议

RSSP-II的安全分析及安全增强新方案

基于多因素聚类选择的Android应用程序分类风险评估方法

基于卷积神经网络恶意安卓应用行为模式挖掘

基于深度神经网络的Android恶意软件检测方法