基于AOSP与SELinux的移动设备管理系统

doi:10.3969/j.issn.1671-1122.2017.09.024

信息网络安全 ›› 2017, Vol. 17 ›› Issue (9): 103-106.doi: 10.3969/j.issn.1671-1122.2017.09.024

基于AOSP与SELinux的移动设备管理系统

宋新龙(), 郑东, 杨中皇

西安邮电大学无线网络安全技术国家工程实验室,陕西西安 710121

收稿日期:2017-08-01 出版日期:2017-09-20 发布日期:2020-05-12
作者简介:
作者简介：宋新龙（1992—）,男,山西,硕士研究生,主要研究方向为移动设备安全;郑东（1964—）,男,山西,教授,博士,主要研究方向为公钥密码学;杨中皇（1958—）,男,福建,教授,博士,主要研究方向为移动设备安全。
基金资助:
国家自然科学基金[61472472];西安邮电大学研究生创新基金 [CXL2016-09]

Mobile Device Management System Based on AOSP and SELinux

Xinlong SONG(), Dong ZHENG, Zhonghuang YANG

National Engineering Laboratory for Wireless Security, Xi'an University of Posts and Telecommunications, Xi'an Shannxi 710121, China

Received:2017-08-01 Online:2017-09-20 Published:2020-05-12

摘要/Abstract

摘要：

文章通过研究分析移动设备的管控需求设计并实现了一个Android移动设备管理系统,其包含Android客户端和服务端两部分,实现了通过服务端远程修改sepolicy对移动设备相关权限的授予和撤销,远程卸载可疑应用,推送信息到客户端等功能。客户端使用AOSP（Android Open Source Project）进行开发,将其加入到最新的Android 7源码中。对系统测试结果表明,所有功能都运行良好。

关键词: 权限管理, SEAndroid, 移动设备管理, AOSP

Abstract:

In this paper, study designed and implemented an enterprise mobile device management (MDM) system by analyzing current situation of mobile device management,it is consisted of an android system app and a server software., which has achieved some functions controling the mobile device, including the server remotely changes the security policy (sepolicy) to realize the granting and revoking of the relevant permissions of the mobile device, remotely uninstall suspicious applications, push information to the client and so on. The client system app was developed using Google’s Android Open Source Project (AOSP) and was added to Android 7. The evaluation experiment results show all functions are running well.

Key words: permission management, SEAndroid, mobile device management, AOSP

中图分类号:

TP399

宋新龙, 郑东, 杨中皇. 基于AOSP与SELinux的移动设备管理系统[J]. 信息网络安全, 2017, 17(9): 103-106.

Xinlong SONG, Dong ZHENG, Zhonghuang YANG. Mobile Device Management System Based on AOSP and SELinux[J]. Netinfo Security, 2017, 17(9): 103-106.

图/表 4

参考文献 16

[1]	EDDY N.Smartphone Sales Near Saturation Point in Mature Markets: IDC[J]. Eweek, 2013(9):13.
[2]	SOUPPAYA M, SCARFONE K.Guidelines for Managing the Security of Mobile Devices in the Enterprise[S]. United States of America : National Institute of Standards and Technology,2013.
[3]	ZAHADAT N, BLESSNER P, BLACKBURN T, et al.BYOD Security Engineering: A Framework and Its Analysis[J]. Computers & Security, 2015, 55:81-99.
[4]	钱煜明, 董振江, 吕达,等. BYOD企业移动设备管理技术[J]. 中兴通讯技术, 2013, 19(6):33-38.
[5]	STEPHENSON P.Mobile Device Management[J]. SC Magazine: For IT Security Professionals (UK Edition), 2016, 52(1):31-82.
[6]	FARUKI P, BHARMAL A, LAXMI V, et al.Android Security: A Survey of Issues, Malware Penetration, and Defenses[J]. IEEE Communications Surveys & Tutorials, 2015, 17(2):998-1022.
[7]	Google. The Android Source Code[EB/OL]. , 2017-4-10.
[8]	YAGHMOURY K.Embedded Android: Porting, Extending, and Customizing[M]. United States of America: O'Reilly Media Inc, 2013.
[9]	MCCARTY B.SELinux: NSA's Open Source Security Enhanced Linux[M]. United States of America: O'Reilly Media Inc, 2004.
[10]	SMALLEY S, CRAIG R. Security Enhanced (SE) Android: Bringing Flexible MAC to Android[C]//NDSS. The Network and Distributed System Security Symposium 2013, February 24-27, 2013,San Diego, California. San Diego: ISOC, 2013: 20-38.
[11]	MERLO A, COSTA G, VERDERAME L, et al.Android vs. SEAndroid: An empirical assessment[J]. Pervasive & Mobile Computing, 2016, 30:113-131.
[12]	李桂芝,韩臻,周启惠,等. 基于Binder信息流的Android恶意行为检测系统[J]. 信息网络安全,2016(2):54-59.
[13]	杨中皇, 董伦铭. 基于SE Android结合远程控制提升移动系统安全性[J]. 西安邮电大学学报, 2016, 21(5):1-10.
[14]	BERTRAND A, David R., AKIMOV A, JUNK P. Remote administration tool for android devices[EB/OL] , 2016-5-1.
[15]	HEARY J, WOLAND A.State of Play Report BYOD, CYOD, BYOT, BYOA and MORE[J]. ITNOW, 2014, 56:56-57.
[16]	M/T 0003—2012 SM2椭圆曲线公钥密码算法[S]. 北京:中国标准出版社, 2012.

基于AOSP与SELinux的移动设备管理系统

Mobile Device Management System Based on AOSP and SELinux

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 4

参考文献 16

相关文章 3

编辑推荐

Metrics

本文评价

[1]	. 基于手机动态密码的计算机使用权限管理机制[J]. , 2014, 14(11): 46-.
[2]	李宇翔;林柏钢. 基于Android重打包的应用程序安全策略加固系统设计[J]. , 2014, 14(1): 0-0.
[3]	李欣. 一种基于智能卡的Android权限管理方法研究[J]. , 2012, 12(8): 0-0.