基于权限分析的Android隐私数据泄露动态检测方法

基于权限分析的Android隐私数据泄露动态检测方法

高岳%胡爱群

基金资助:
国家发改委信息安全专项

Dynamic Detection of Android Privacy Leakage based on Permission Analysis

GAO Yue%HU Ai-qun

About author:东南大学信息安全研究中心,江苏南京,211189

摘要/Abstract

摘要： 针对现有Android平台隐私数据泄露动态检测方法检测效率较低的情况，文章设计并实现了一种基于权限分析的Android隐私数据泄露动态检测方法。该方法将Android静态检测中的权限分析与动态污点检测结合，根据应用程序申请的权限确定动态污点检测的隐私数据类型和隐私出口类型。检测选项保存在系统属性中。实验结果显示，该方法能够在保证隐私数据泄露检测有效性的前提下，提高动态污点检测的效率。

Abstract: Current dynamic detection method of private data on Android platform is inefifcient. To solve this problem, a novel dynamic detecting method based on permission analysis is designed and implemented. This method combines static permission analysis with dynamic taint detection. The taint types and privacy export types in dynamic detection are determined by the permissions application applies for. The detection options are set through Android system properties. The experimental results show that this method can improve the efficiency of dynamic taint detection without affecting effectiveness.

. 基于权限分析的Android隐私数据泄露动态检测方法[J]. .