A privacy leak detection method and system in Android application network communication

Abstract

The invention discloses a privacy leaking detecting method and system for android application network communication. The method comprises the following steps: crawling android application to be detected, and building an application set to be detected; building a main-in-the-middle attack server; initializing each tester environment; arranging a multi-tester distributive running scheduling system; analyzing APK files of the application to be detected; installing the application program corresponding to the APK file, and driving the application program to run; analyzing a log file created by the Burp Suite, and acquiring the application set with SSL man-in-the-middle attack; analyzing a network data pack file created in the running process of the collected application program; recognizing the privacy leaking type of the network data pack file according to the application set with the SSL man-in-the-middle attack. The method is flexible to use, and automatic in the whole process; the android system and the android application program structure are not modified; the privacy leaking behavior of the android application in the network communication process can be safely and accurately detected.

Description

technical field [0001] The invention belongs to the technical field of mobile security and interface automation testing, and more specifically relates to a privacy leakage detection method and system in Android application network communication. Background technique [0002] Android mobile devices carry more and more private data of users, and unsafe network communication will lead to leakage of user privacy. According to statistics, about 67% of the Android application network communication process uses the HTTP protocol, and about 20% uses the HTTPS protocol. Due to the clear text transmission of the HTTP protocol, once the HTTP network request contains the user's private data (such as address book, short message, calendar and photo, etc.), there will be a privacy leak. At the same time, incorrect use of the SSL protocol will also cause users to face the risks of man-in-the-middle attacks and privacy leaks. [0003] At present, the following methods are mainly used to so...

AI Technical Summary

Problems solved by technology

But from an implementation point of view, existing solutions rely on modifying the Android system or Android application structure; dynamic analysis relies on static decompilation technical guidance; cannot effectively detect hardened applications

Therefore, from the perspective of implementation and versatility, the existing solutions need to be improved

Images