Android权限异常检测技术的研究.docVIP

Android权限异常检测技术的研究 崔学成 陆南 江苏科技大学电子信息学院 X 关注成功！ 加关注后您将方便地在 我的关注中得到本文献的被引频次变化的通知！ 新浪微博 腾讯微博 人人网 开心网 豆瓣网 网易微博 摘????要： 在Android系统中, 权限机制是系统重要的组成部分, 往往权限的申请一定程度上会反应出该应用的具体目的。而一个应用要想顺利和正常工作是离不开权限的, 所以用权限来判断一个应用的恶意性是具有可行性的。并且一个恶意应用要想对用户的隐私造成威胁是需要多个权限联合起来一起运作的, 单个权限并不能对用户的财产安全造成损害。为了能较为准确地判断恶意应用, 文中先通过卡方检验去除冗余权限, 然后通过FP-growth算法挖掘权限之间的关联性, 构建FP-tree, 建立检测模型, 来对应用进行恶意性判决。通过大量实验设置最优最小支持度, 最后实验结果表明, 文中提出的方法比其他检测方法得出的结果更为准确。文中首次将加权FP-growth算法和卡方检验应用到移动端, 结果表明西方提出的方法具备可行性。 关键词： 安卓; 安全; 权限; 卡方检验; FP-growth算法; 恶意应用; 作者简介：崔学成 (1990-) , 男, 硕士研究生, 研究方向为信息安全。 收稿日期：2017-02-06 Android authority anomaly detection technology CUI Xue-cheng LU Nan School of Electronic Information, Jiangsu University of Science and Technology; Abstract： In the Android system, the authority mechanism is an important part of the system, the authority is often the right to respond to the specific purpose of the application.And an application to be successful and normal work is inseparable from the authority, so the use of authority to determine the feasibility of a malicious application is feasible.And a malicious application to want to pose a threat to the users privacy is the need to work together to jointly operate a single authority and can not cause damage to the users property security.In order to accurately judge the malicious application, this paper first through the chi square test removes redundant permissions, and then through the FP-growth algorithm for mining association, construction of power between FP-tree, a detection model for malicious application of judgment.Through a large number of experiments, the optimal minimum support is set up, and the experimental results show that the method proposed is more accurate than other methods.Weighted FP-growth algorithm and chi square test were applied to mobile terminal for the first time, and the results show that it is feasible. Keyword： Android; security; authority; chi square test; FP-growth algorithm; malicious application; Receive