基于信任管理的移动终端安全权限设置推荐系统

摘要

为解决移动设备应用权限授予的安全问题,设计了基于信任管理的安全权限推荐系统(PermitRec),以帮助用户对移动应用进行合理的权限设置,控制用户对敏感数据的安全访问.PermitRec系统基于应用的信誉值、已安装相似应用的权限设置、应用之间的相似度、用户对相似应用的信任值及待授权权限的安全等级等参数计算权限设置的风险值,能够根据全局风险值动态地推荐移动应用的权限设置,以帮助用户合理设置权限.测试结果表明,PermitRec系统能够推荐有效的权限设置,防止敏感移动设备资源的恶意访问.%A recommender permitRec is designet system for permission configuration based on trust management,which aims to help users on permission setting in order to protect user privacy and device security.PermitRec system can automatically generate recommendations on permission security configuration for a mobile application based on setting risk.The setting risk is evaluated by considering the application reputation,the security configurations of similar applications installed and used by the user,appli-cation similarity,and the user trust in similar applications,as well as the risk level of application permissions.The performance testing result of PermitRec system shows that it can provide effective permission recommendations to prevent malicious access to sensitive mobile resources.