Research on Static Analysis Technology of Android Application Security Defects

被引:0
|
作者
Chen, Lu [1 ]
Liu, Xing [2 ]
Ma, Yuan-yuan [1 ]
Shi, Cong-cong [1 ]
Li, Ni-ge [1 ]
机构
[1] Global Energy Interconnect Res Inst, Inst Informat & Commun, Nanjing 210003, Jiangsu, Peoples R China
[2] NARI Grp Corp, Informat Commun Technol Branch, Nanjing 210003, Jiangsu, Peoples R China
关键词
Android application; Static analysis; Security detects; Security vulnerabilities; Visitor pattern;
D O I
暂无
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
With the rapid development of mobile Internet, the number of smart phone users is increasing, especially android smart phone users, the security defects of android application emerge in endlessly. In this paper, android application security defects are divided into three, include vulnerabilities defects, components defects and configuration defects. Focus these security defects, first static analysis the bytecode file, then use the resolution android bytecode as an inspection vehicle, design detector for each species vulnerability based on visitor pattern. Finally, part of the code is achieved, practice has proved that the scheme can meet Android application security defects detection requirements in the static testing.
引用
收藏
页数:8
相关论文
共 50 条
  • [1] Research on Personal Privacy Security Detection Technology for Android Application
    Wang, Chao
    Dong, Jiahan
    Wang, Xiaohu
    Ren, Tianyu
    2022 IEEE 6TH ADVANCED INFORMATION TECHNOLOGY, ELECTRONIC AND AUTOMATION CONTROL CONFERENCE (IAEAC), 2022, : 586 - 590
  • [2] Android application vulnerabilities static mining technology
    Tang J.
    Liu J.
    Li R.
    Li W.
    Huazhong Keji Daxue Xuebao (Ziran Kexue Ban)/Journal of Huazhong University of Science and Technology (Natural Science Edition), 2016, 44 : 20 - 24
  • [3] Android Security via Static Program Analysis
    Shen, Feng
    MOBISYS'17 PHD FORUM: PROCEEDINGS OF THE 2017 WORKSHOP ON MOBISYS 2017 PH.D. FORUM, 2017, : 19 - 20
  • [4] Research on Android Application Security Protection in China
    Song, Wenjie
    Li, Hao
    INTERNATIONAL CONFERENCE ON COMPUTER SCIENCE AND APPLICATION ENGINEERING (CSAE), 2017, 190 : 512 - 519
  • [5] Review and analysis on research and application of static crushing technology
    Zheng, Wenzhong
    Li, Ruisen
    Xu, Libo
    Hou, Xiaomeng
    Harbin Gongye Daxue Xuebao/Journal of Harbin Institute of Technology, 2021, 53 (05): : 190 - 200
  • [6] Analysis and research of android security system
    Zheng, Ling
    Liu, Yanjiao
    ADVANCES IN ENERGY, ENVIRONMENT AND MATERIALS SCIENCE, 2016, : 735 - 739
  • [7] The Analysis of the Security of Android Application Components
    Li, Xiu
    Li, Dai-Ping
    INTERNATIONAL CONFERENCE ON COMPUTER SCIENCE AND COMMUNICATION ENGINEERING (CSCE 2015), 2015, : 1013 - 1018
  • [8] Security Analysis of OnlineCabBooking Android Application
    Grover, Nishant
    Saxena, Jyotsna
    Sihag, Vikas
    PROCEEDINGS OF THE INTERNATIONAL CONFERENCE ON DATA ENGINEERING AND COMMUNICATION TECHNOLOGY, ICDECT 2016, VOL 1, 2017, 468 : 603 - 611
  • [9] RESEARCH ON THE TECHNOLOGY OF SHELLING OF ANDROID REINFORCED APPLICATION
    Guo, Yanhui
    Gao, Yuhao
    Wu, Bo
    Zhang, Miao
    PROCEEDINGS OF 2016 5TH IEEE INTERNATIONAL CONFERENCE ON NETWORK INFRASTRUCTURE AND DIGITAL CONTENT (IEEE IC-NIDC 2016), 2016, : 89 - 93
  • [10] A Comprehensive Study on Static Application Security Testing (SAST) Tools for Android
    Zhu, Jingyun
    Li, Kaixuan
    Chen, Sen
    Fan, Lingling
    Wang, Junjie
    Xie, Xiaofei
    IEEE TRANSACTIONS ON SOFTWARE ENGINEERING, 2024, 50 (12) : 3385 - 3402