一种基于匹配的Android系统漏洞检测方法

doi:10.11959/j.issn.1000-0801.2016155

Abstract

Abstract:

Android system has occupied the majority share of smart mobile operating systems.However,Android system has worrying security issues.It frequently bursts high-risk vulnerabilities in recent years,which is a big security risk to the majority of Android users.Android system vulnerabilities were studied,and a rapid detection method of Android system vulnerabilities based on matching was proposed.A script-based vulnerability scanning tool was also designed.Through the evaluation of experiments,the tool is running well.

Key words: Android, matching, vulnerability detection

iayuan ZHANGJ. A detection method of Android system vulnerabilities based on matching[J]. Telecommunications Science, 2016, 32(5): 132-137.

Figures/Tables 7

References 10

[1]	Gartner . World wide smartphone sales in Q3 2013[EB/OL]. [2015-02-16]. .
[2]	AppBrain Stats . Number of available Android applications[EB/OL]. [2015-02-16]. .
[3]	Consumer Reports . Keep your phone safe-how to protect yourself from wireless thread[EB/OL]. [2015-02-16]. .
[4]	WooYun . Android uncovers master-key vulnerability analysis[EB/OL]. [2015-02-16]. .
[5]	Blue Box . Android fake ID vulnerability[EB/OL]. [2015-02-16]. .
[6]	刘鹏 . PHP Web应用程序安全性研究及安全漏洞检测工具开发[D]. 西安：西安电子科技大学， 2012. LIU P . Web PHP application security research and development of security vulnerability detection tools[D]. Xi'an:Xidian University, 2012
[7]	石晓旻 . 游戏引擎扩展脚本技术的研究及实现[D]. 成都：电子科技大学 2005. SHI X M . Research and implementation of the game engine extension script technology[D]. Chengdu:University of Electronic Science and Technology of China, 2005.
[8]	Keplerproject . LuaJava[EB/OL]. [2015-02-16]. .
[9]	Wikipedia . LAMP[EB/OL]. [2015-02-16]. .
[10]	Wikipedia D . XML[EB/OL]. [2015-02-16]. .

Metrics

Recommended 0

No Suggested Reading articles found!

表名（tablename）	vuldb
ID（id）	integer
漏洞名（name）	text
漏洞产生时间（time）	date
漏洞危害（detail）	text
漏洞编号（cve）	text
漏洞类型（type）	text
应用散列值（checksum）	text
应用包名（packagename）	text

接口名称	主要功能
insertVul	插入新扫描记录
clearDB	清除
closeDB	关闭数据库
openDB	打开数据库
updateVulInfo	更新制定记录信息
searchVulInfo	查询记录详细信息
deleteVul	删除记录

扫描项	漏洞检测工具	360安全卫士	金山卫士金山卫士
运行是否正常	正常	正常	正常
扫描时间／s	14	6	8
扫描漏洞数／个	15	2	1
扫描误报数／个	0	0	0

运行项	运行情况
运行是否正常	正常
扫描脚本总数／个	50
脚本最长运行时间／ms	900
脚本最短最长时间／ms	10
脚本平均运行时间／ms	280

扫描项	Android 2.3	Android 4.1	Android 4.3
运行是否正常	是	是	是
扫描时间／s	14	15	13
扫描漏洞／个	5	3	1
扫描误报数／个	0	0	0

A detection method of Android system vulnerabilities based on matching

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 7

References 10

Related Articles 15

Metrics

Recommended 0

[1]	Cheng SHI, Pengju LIU, Zhigang DU, Sunxuan ZHANG, Zhenyu ZHOU, Huifeng BAI, Guoqing HE, Wenwen SUN, Yue MA. Digital twin-assisted multi-mode communication resource management methods for smart buildings [J]. Telecommunications Science, 2023, 39(1): 60-71.
[2]	Jingli WANG, Yu ZHAO. Study on the matching scheme between early warning information dissemination demands and communication network dissemination channels [J]. Telecommunications Science, 2022, 38(5): 104-113.
[3]	Qi ZHANG. Ecologic planning and application of broadband access network based on geographic grid [J]. Telecommunications Science, 2018, 34(9): 186-192.
[4]	Desheng XIE,Rong CHAI,Leilei HUANG,Qianbin CHEN. Standardization of 5G new radio technology oriented Polar code [J]. Telecommunications Science, 2018, 34(8): 62-75.
[5]	Pan MAO,Xiaoguang HUANG,Wei WANG,Jian SONG. Massive MIMO channel estimation and feedback based on compressed sensing [J]. Telecommunications Science, 2018, 34(12): 46-52.
[6]	Liping ZHAO,Tao LIN,Kailun ZHOU,Hua PENG,Keli HU. A byte-size multi-variable-length-code based string matching algorithm for Alpha image coding [J]. Telecommunications Science, 2018, 34(11): 96-104.
[7]	Jin ZHOU,Luyang ZHANG,Peng YANG. D2D data collaboration forwarding mechanism based on contract theory [J]. Telecommunications Science, 2018, 34(10): 18-26.
[8]	Tian YAO,Hui ZHANG. A bilevel game matching algorithm in cellular-D2D hybrid scenario [J]. Telecommunications Science, 2018, 34(1): 43-51.
[9]	Kai LUO,Junwei HUANG,Pengguang ZHOU,Hao XU,Can WU. A low-complexity detection algorithm for quadrature spatial modulation systems [J]. Telecommunications Science, 2017, 33(5): 75-81.
[10]	Yan CAO,Wei JIN,Randi FU. An image inpainting method based on weighted priority and classification matching [J]. Telecommunications Science, 2017, 33(4): 94-100.
[11]	Jiaren JIANG,GLiu JIAN,Weiqing WANG. Android security reinforcing scheme of intelligent terminal based on certificate chain authentication mechanism [J]. Telecommunications Science, 2017, 33(2): 32-35.
[12]	Yanzhi ZHANG,Xiaoqin YE. Detection of sybil attacks based on periodic ultra wide band distance information in WSN [J]. Telecommunications Science, 2016, 32(8): 110-117.
[13]	Yaling LUO,Wenwei LI,Xin SU. HTTP behavior characteristics generation and extraction approach for Android malware [J]. Telecommunications Science, 2016, 32(8): 136-145.
[14]	Enqing CHEN,Xinli GAO,Xiaoqiang XIANG,Zhongyong WANG. Sparse channel estimation algorithm based on compressed sensing in MIMO NC-OFDM system [J]. Telecommunications Science, 2016, 32(2): 41-46.
[15]	Sihan QING. Research status and outlook of Android security [J]. Telecommunications Science, 2016, 32(10): 2-14.