摘要
大多数现有的Android应用程序风险评估根据经验直接指定因素的权重,通过统计少量因素的使用频率来计算安全风险。提出一种新的Android应用风险评估方法,能够同时提供定量和定性评估。该方法融合系统权限、API调用、Intent Filter的action属性以及数据流等多种风险因素,基于因素的风险分类与加成进行风险赋值,基于层次聚类对因素子集进行权重分配。实验表明,评估结果能够有效地反映Android应用程序的真实安全风险。
Most existing risk assessments of Android applications directly assign weights to factors according to experience,and calculate security risks by counting the frequency statistics of few factors.A new method for risk assessment of Android applications is proposed,which can provide both quantitative and qualitative assessment.This method integrates multiple risk factors such as system permissions,API calls,the action properties of Intent Filter,and data flow.The risks of factors are assigned based on their risk classification and addition,and the weights of factor subsets are distributed based on hierarchical clustering.Experiments show that the assessment results can effectively reflect the real security risks of Android applications.
作者
超凡
杨智
杜学绘
韩冰
CHAO Fan;YANG Zhi;DU Xuehui;HAN Bing(Information Engineering University,Zhengzhou 450001,China)
出处
《网络与信息安全学报》
2021年第2期161-173,共13页
Chinese Journal of Network and Information Security
基金
国家重点研发计划(2018YFB0803603)
国家自然科学基金(61802436)。
关键词
安卓
风险评估
安全威胁
静态分析
层次聚类
Android
risk assessment
security threat
static analysis
hierarchical clustering
