RBAC based malicious program interception and processing method in Android platform

Abstract

The invention discloses an RBAC based malicious program interception and processing method in an Android platform, and belongs to the technical field of mobile security. For the technical field of existing mobile security, privacy data of a user have a leakage risk and a current malicious program detection method has problems to be solved, so that an RBAC based malicious program interception method is proposed. When an application accesses to the privacy data of the user, whether related operations are permitted or not is determined according to a role that the application belongs to and permission information corresponding to the application by querying an RBAC policy library, so that the privacy security of the user is ensured.

Description

technical field [0001] The invention belongs to the technical field of mobile security, and in particular relates to an RBAC-based malicious program interception and processing method under an Android platform. Background technique [0002] With the rapid development of the Android system and smart phones, Android applications show explosive growth. Followed by the security problems of the Android system, malicious attacks on mobile terminals by malicious applications, and the theft of user privacy information are becoming more and more serious. Due to the lax supervision of the Android third-party application market, many normal applications are embedded with malicious codes that steal user privacy and are repackaged and uploaded to the Android market. In many cases, antivirus software cannot intercept malicious requests from similar applications. The current mainstream malicious program detection methods are divided into static detection and dynamic detection. Static dete...

AI Technical Summary

Problems solved by technology

Due to the lax supervision of the Android third-party application market, many normal applications are embedded with malicious codes that steal user privacy and are repackaged and uploaded to the Android market. In many cases, antivirus software cannot intercept malicious requests from similar applications.

The current mainstream malicious program detection methods are divided into static detection and dynamic detection. Static detection is highly dependent on the malicious code base. When a new type of malicious program appears, it is often unable to accurately identify malicious behavior. The rate needs to be improved; dynamic detection methods include MonkeyRunner, DroidBox, TaintDroid, Hips, etc., which are characterized by a small dependence on the code feature library, and judge whether it is malware by capturing real malicious behavior during operation, and there are malicious programs at the same time Risk of Bypassing System Detection

For example, for the traditional HIPS program detection method, APIHOOK is implemented by injecting .so and .jar files in the user state. If a malicious application implements APIHOOK in this way, it will bypass the detection of the HIPS system and give users privacy to a certain extent. Security poses a threat

Images