The Research Of Android Application Security

The Android operating system and applications have being experiencing an extremely fast growth since2007; the number of Android mobile handsets and Android applications are all booming up. However, the security issues of the Android operating system and applications are also reported more and more frequently. Android applications lack of protection against the malicious code injection, this is why thousands of users lost private information and money under this attack. So the research of the Android application security is of greate importance to protect the Android eco system and the benefits of the Android users.Based on the research of the Android application security and the analyzation of the function and security risks of the Android applications that access the user private data, this paper summed up the security defects of the Android applications that access the user private data. The paper then implemented a prototype of the Android malicious code, which included the function to attack the application security defects, and designed a method to inject the malicious code into several Android software that access the user private data, the malicious code could wake up by the Android broadcast and do dirty things behind the applications, which proved the validity of the Android application security defects.The research of this paper is the first period of the research of the security test method for the Android applications. The security defects of the Android applications that access the user private data are practical reference for the design of the Android application security test method, and the malicious code is an important test case for the improvement of the Android application security test method.In this paper, the research of the Android application security referred to the component design pattern of the Android application and the development skills and tools provided by the Android SDK. Besides, the skills and tools of the reversing engineering for Android platform were also used to achieve the code injection.