Research on Android Component Security Testing Method for Mobile Application in Power System

摘要

With the rapid development of mobile communication technology, mobile applications have been widely promoted in power system. As an important part of the Android system, Component security has attracted much attention. Based on the current status of power system mobile application's development, this paper proposes a component classification security testing scheme to solve the problem in current imperfect security testing method. First, according to the development mode, the power mobile application is divided into integrated development application and independent development application. For integrated development application, combined with the current popular component's vulnerabilities, a comprehensive security testing method for public components is proposed. For the independent development application, combined with the component function flow analysis method, a security testing method of the private component is proposed with several specific cases. The testing scheme and test method proposed in this paper, could find out the security risk of Android component efficiently, and provides technical guidance for preline safety evaluation. Automated security testing will be researched in the future.