摘要
针对Android应用软件安全性问题,提出一种基于云端协同框架的轻量级安全检测方法。云端定义权限及权限组合的威胁度,通过分析不同类别的主流应用得到权限概率;终端以云端的计算结果为基础,对预安装的应用进行检测和威胁度计算;终端上传恶意应用的应用签名到云端,周期性地从云端下载安全信息文件。以视频播放类应用为例,选取用户数量超过10万的30个应用进行实验,成功检测到两个威胁度较高的应用,验证了该方案的有效性。
For the security problem of Android applications,a lightweight security detection method based on cloud collaboration architecture was proposed.In the cloud,the threat degrees of permissions and combinations were defined,and permission probabilities were obtained through the statistical analysis of different categories of mainstream applications.On a terminal device,the threat degrees of applications were calculated with the results from the cloud.The signatures of malicious applications detected were uploaded to the cloud,and the security information file was periodically downloaded from the cloud.For an experiment,thirty video playback applications with more than 100000 users were selected and two applications with a high threat degree were successfully detected.Experimental results verify the validity of the method.
出处
《计算机工程与设计》
北大核心
2016年第1期42-45,64,共5页
Computer Engineering and Design
基金
国家科技支撑计划课题基金项目(2012BAH73F01)
中国科学院先导专项课题基金项目(XDA06040501)
关键词
ANDROID平台
访问权限
权限组合
权限概率
应用威胁度
云端协同
Android platform
access permission
permissions combination
permission probability
application threat level
cloud collaboration
