面向Android系统安全分析的在线学习算法研究

摘要

In order to solve hidden security risks of mobile terminal,this paper proposed a new intrusion detection algorithm for Android mobile terminal.Firstly,the proposed system normalized kernel information,which was collected on the Android platform.And it obtained a reasonable number of training samples by introducing fast kernel density estimation algorithm (FastKDE).Based on incremental learning online algorithm,using support vector machine(SVM)which was good at han-dling classification of small sample data,and the system determined whether it was invaded or not.The experimental results show that this method greatly shortens the training time,and gradually achieves the best detection performance,with better scalability and self-enhancing capabilities.%针对当前移动终端使用中存在的安全隐患，研究了一种新的面向Android移动终端的入侵检测算法。首先是在Android平台上收集移动终端内核信息并进行预处理，通过引入快速核密度估计（fast kernel density es-timation，FastKDE）算法对收集到的大规模样本进行压缩，得到数量合理的训练样本，然后结合在线增量学习算法，利用支持向量机（SVM）算法对处理后的数据进行判别以识别出入侵。实验结果表明，该方法极大缩短了训练时间，检测性能逐步达到最佳，具有较好的可扩展性和自提升能力。