一种基于Android内核的APP敏感行为检测方法及实现

摘要

进入移动智能终端时代后，Android手机操作系统由于其开放、免费的特点，成为市场上的主流操作系统之一。然而，大量针对Android系统编写的病毒、木马和恶意软件已经严重威胁到智能手机用户的个人隐私和财产安全。虽然在Android系统中进行敏感操作必须向系统申请相应的权限，Android系统中也存在权限控制相关的系统模块，但是恶意软件可以借助系统漏洞或第三方程序漏洞进行攻击。鉴于Android应用敏感行为检测的需要，文章研究分析了现有Android系统中应用程序行为检测方法，设计并实现了针对Android系统应用程序的动态行为监测系统，该系统能够实时监控应用程序的敏感行为，为恶意程序检测提供帮助。%In the era of intelligent mobile terminal, because of the characteristics of openness and free of charge, Android has become one of the major operation systems on the market. However, a large number of Android viruses, Trojans and malicious software have been serious threats to the privacy and property securities of smart phone users. In the Android operation system, although it is necessary to apply the authorities to the system for sensitive operations, and there are some system modules related to authority control, malicious software can use the system vulnerabilities or third party program vulnerabilities to carry out the attack. To meet the need of Android applications sensitive behaviors detection, this paper analyzes the popular applications behaviors detection tools in the Android system, designs and implements an Android applications dynamic detection system. The system can monitor the Android applications sensitive behaviors in real time, and provides help for the detection of malicious programs.