Method for detecting cryptology misuse of Android application programs

Abstract

The invention discloses a method for detecting cryptology misuse of Android application programs. The method comprises the following steps of decompiling a to-be-detected program and generating a codebase; then, looking up code segments related with a cryptographic algorithm from the codebase; then, stripping the code segments related with the cryptographic algorithm out of an original program to obtain a complete cryptographic algorithm implementation process code; finally, performing data abstraction and process modeling processing on each cryptographic algorithm implementation process code segment obtained in the step 3; comparing the cryptographic algorithm implementation process code segments item by item through pattern matching and a cryptographic algorithm implementation rule appointed in advance, outputting items which do not meet the implementation rule and summarizing to form a safety analysis result. According to the method disclosed by the invention, through static analysis on an Android application program, a cryptographic algorithm type used in the application program can be automatically judged, and the code segments related with the cryptographic algorithm are automatically extracted; safety analysis is performed on the code segments so as to find out a problem link during a cryptographic algorithm implementation process, and the safety analysis result of the cryptology misuse of the application program is finally obtained.

Description

technical field [0001] The invention relates to an application program security analysis technology in the field of mobile intelligent terminals, and relates to a detection scheme for whether there is a cryptography misuse loophole in an Android application program. Background technique [0002] With the development of the mobile Internet, mobile smart terminals are playing an increasingly important role in people's daily life, followed by mobile smart terminals storing and processing more and more information closely related to user privacy or interests. important data. When processing these important data, in order to ensure the security of the data, the application program will encrypt the data before storing and sending the data. [0003] The encryption and decryption of data in the application is generally a mature cryptographic algorithm. As mature cryptographic algorithms, these algorithms have been analyzed and tested by many cryptographic researchers in the world,...

AI Technical Summary

Problems solved by technology

But the defects and deficiencies of this technology are: first, the platform of this program analysis technology is Windows, which cannot handle the application programs of Android platform; second, the main function of this technology is a technology for extracting internal information of Windows applications, The information mentioned here includes application format, development language, protection type, cryptographic algorithm used, etc.

Images