Study On Security Situation Awareness For Mobile Internet Terminal Based On Android System

Mobile Mobile Internet is the product of double-network fusion. It inherits thefeatures of mobile telecommunication network and the Internet, as well as their securitythreat. Mobile terminal (MT) is the principal part of the Mobile Internet. It is the vehicleof data storage, telecommunication and management, and it is in charge of theinteractions between network resources and their users. Android embedded OS, as thesystem platform with highest market occupancy, brings users unlimited usingexperience because of its open source, which also causes an increasing number ofsecurity issues.Current protections taken by MTs are usually passive, and there is lack of researchin initiative analysis of security state. Situational awareness is one of the major initiativetechniques. In this thesis, we propose a framework of MT’s situational awareness on thebasis of analyzing the security situation of Mobile Internet and MTs. We focus on thesituational awareness index and data acquisition method in this framework, and design amodel for security situation index and a dynamic encryption mechanism forcommunication data of situational awareness. Also we design and implement aprototype system of MT security situational awareness based on Android, and then testand verify the index system and dynamic encryption mechanism.The main work of this thesis is as described below:1）Study the Mobile Internet and Android platform in depth, analyzing theircomponents, features and security. On the basis of the study, design a MT-orientedsituational awareness framework, provide the layers of the framework and the relationsbetween terminals, servers and situational factors. Also propose the acquisition methodof remote situational data based on the features of MT.2）Design a security situation index system for mobile terminals, which is based onthe security characteristics of MT and the object-oriented analysis of MT’s securitysituation and analyze the function of each index. The three core indexes are foundation,vulnerability and confrontation. Also build a model of the index system using UML.3）Study the data acquisition technology of situational awareness in depth, anddesign a random number encryption algorithm aiming at the security issues of remotedata acquisition to encrypt the control instruction set that in order to protect the controlmechanism from replay attacks.4）Design a MT-oriented prototype system of remote situational awareness. In theprototype system, implement the dynamic generation and transition of remote controlinstruction set, and the remote access and storage of situational data. Test and verify thefeasibility of the dynamic generation mechanism of the control instruction set. Analyze how well the data acquisition method supports Android system and verify thecontribution the index system does to further research of MT-oriented situationalawareness.This thesis is an exploration and an initial practice in the field of mobile terminalsecurity. It paves the foundation of the Mobile Internet security analysis andmanagement and it has engineering practice value.