Research And Application Of Security Assessment Technology For Mobile Intelligent Terminal

With the continuous development of mobile Internet and manufacturing technologies,the computing power of intelligent mobile terminals improves rapidly and various types of applications have emerged,which enhance users' experience and makes our life easier.The number of users and the usage rate of mobile smart terminals are continuously increased,and smart terminals with different functions have penetrated into every aspect of our life.At the same time,the security issues of mobile smart terminals are becoming increasingly significant.People always store their own photos,chat records,account passwords and other private information on mobile smart terminals unconscious,which have become the main targets for hackers.Taking the Android mobile phone as an example,due to the characteristics of open source,the Android system is favored by major mobile phone manufacturers,and the market share has increased year by year.However,the principle of its source code is public because it is open source,thus it is more vulnerable to be attacked.In this case,it is very necessary to do research on the security of Android terminal.This article takes the Android mobile phone as a security evaluation object to design and implement the entire security testing platform.The testing schemes is designed from four aspects: system security,storage security,privacy security and application security,and which is implemented by Android phone and test platform.Finally,we propose two models to divide the security classification of Android terminals.The main work of this article is as follows:(1)The entire test platform is designed and implemented.The platform is divided into two parts and the C/S model is adopted.A computer as the server is able to receive test results and make comprehensive evaluations to obtain test reports.And a mobile phone as the client complete the phone security test.The server and client are connected via WiFi or USB.(2)To design and implement security testing schemes for file access control,encryption mechanisms,and common vulnerabilities to complete system security testing.(3)To design and implement security test schemes for the integrity of storage encrypted data and data storage,and finally complete data storage security testing.(4)To design and implement WiFi privacy security and SMS privacy security testing scheme to complete privacy security testing.(5)To design and implement application security and application software data security testing programs to complete application software security testing.(6)To propose and implement two mobiles security terminal security level division model based on AHP algorithm and SVM algorithm.