Study And Implementation Of Security Technology With Android Platform

Android is now one of the most popular mobile platforms. With the popularity ofAndroid, problems of its security become increasingly prominent. More and moremalwares which target Android have appeared, they may gather personal information orcost payment. These bring serious loss to Android users. Therefore, the research forsecurity technology of Android platform is particularly important.In this paper, the security mechanism of Android and its risks are studied. And then avirus defense system based on Android is designed and realized by using the staticdetecting method combined with the dynamic detecting method. The system includes fourmodules: antivirus module, anomaly detection module, alarm module, and log module. Thecore modules of the system are the antivirus module and the anomaly module which usedto detect the malware in Android system.The core of the antivirus module is antivirus engine which mainly use the staticdetecting method based on the signatures of virus. Based on the study and analysis ofAndroid security mechanism which is inherited from Linux, and the security mechanism ofAndroid itself， the features which extract from malware are used to generate signatures ofvirus. When scanning, the antivirus engine extracts applications’ features, matching withthe signatures of virus, to detect malware. However, the antivirus module which realized inthis paper has a high accuracy, but it can’t detect unknown malware.In order to detect unknown malware, an anomaly detection module is designed whichuse the dynamic detecting method to monitor the behavior of Android in this paper. Thepotential security risks of Android are analyzed, and the principle of malicious is studied.In order to avoid the attacks from malware, the anomaly detection module monitors thefunctions of SMS, call, network, application installation, and the performance of CPU,memory, progress and power level have been monitored too.Finally, the proposed virus defense system is installed on Android mobile phones totest. The test method is combining attacks from malware and human, and the functions andreliability of the proposed system are tested. Meanwhile, the consumption of the proposed system is estimated. The results show that the proposed virus defense system is effective,stable and low consumption in detecting malware on Android.