###

DOI:

计算机系统应用英文版:2013,22(7):148-151

View/Add Comment 过刊浏览高级检索 HTML

←前一篇 | 后一篇→

码上扫一扫！

下载全文

一种Android应用程序恶意行为的静态检测方法

李子锋, 程绍银, 蒋凡

(中国科学技术大学信息安全测评中心, 合肥 230027)

Static Detection Method for Malicious Behavior in Android Apps

LI Zi-Feng, CHENG Shao-Yin, JIANG Fan

(Information Technology Security Evaluation Center, University of Science and Technology of China, Hefei 230027, China)

摘要

图/表

参考文献

相似文献

本文已被：浏览 2031次下载 4777次
Received:December 27, 2012 Revised:January 29, 2013

中文摘要: 目前Android应用程序的安全问题得到越来越多的关注. 提出一种检测Android应用程序中恶意行为的静态分析方法, 该方法采用静态数据流分析技术, 并实现了常量分析算法, 通过跟踪应用程序对常量值的使用来检测恶意订购、资费消耗等多种类型的恶意行为. 实验结果表明, 该方法可以有效检测出Android应用程序的恶意行为, 具有较高的实用性.

中文关键词: 静态分析恶意行为常量分析 Android安全数据流分析

Abstract:Currently, the issues on Android application’s security have attracted more and more attentions. This paper presents a static analysis method to detect malicious behavior in Android applications. The method uses static data flow analysis technology, and implements a const analysis algorithm that tracing how the const value is used by the application to detect different kinds of malicious behavior, such as ordering services and consuming payments maliciously. The result of experiments shows that the method is practical, and can detect the malicious behavior in Android applications effectively.

keywords: static analysis malicious behavior const analysis Android security data flow analysis

文章编号： 中图分类号： 文献标志码：

基金项目:高等学校博士学科点专项科研基金新教师类资助课题(20113402120026);安徽省自然科学基金(1208085QF112);安徽省高等学校优秀青年人才基金(2012SQRL001ZD);中央高校基本科研业务费专项资金(WK0110000007)

Author Name	Affiliation
LI Zi-Feng	Information Technology Security Evaluation Center, University of Science and Technology of China, Hefei 230027, China
CHENG Shao-Yin	Information Technology Security Evaluation Center, University of Science and Technology of China, Hefei 230027, China
JIANG Fan	Information Technology Security Evaluation Center, University of Science and Technology of China, Hefei 230027, China

Author Name	Affiliation
LI Zi-Feng	Information Technology Security Evaluation Center, University of Science and Technology of China, Hefei 230027, China
CHENG Shao-Yin	Information Technology Security Evaluation Center, University of Science and Technology of China, Hefei 230027, China
JIANG Fan	Information Technology Security Evaluation Center, University of Science and Technology of China, Hefei 230027, China

引用文本：
李子锋,程绍银,蒋凡.一种Android应用程序恶意行为的静态检测方法.计算机系统应用,2013,22(7):148-151
LI Zi-Feng,CHENG Shao-Yin,JIANG Fan.Static Detection Method for Malicious Behavior in Android Apps.COMPUTER SYSTEMS APPLICATIONS,2013,22(7):148-151