Analysis And Study Of Web Interaction In Android Apps Based On WebVIEW

Dynamic Analysis is an important technique in Android App Security Research. The idea of the technique is to automatically run Android Apps, intercept and perform analysis on runtime data. To achieve high code coverage in dynamic analysis, the hierarchy of UI widgets should be explored as much as possible. WebView is a special UI widget provided by Android to display Web pages in Android App, in which important user interactions are found. WebView is not well handled by dynamic analysis systems nowadays. In this article two approaches based on Computer Vision and WebDriver respectively are proposed to solve this issue, and a Web View-based dynamic analysis system for Android Apps is designed and implemented.Web interactions are well reflected by URLs used in HTTP requests, in WebView-based dynamic analysis for Android Apps, the URLs triggered by Apps are intercepted and handled by open online security services like Spamhaus, SURBL, Google Safe Browsing, and VirusTotal. Since some URLs are time-sensitive, the analysis of the URLs should be in time. In this article a real-time URL-analysis framework based on web.py is presented to achieve this.The WebView-based dynamic analysis system for Android Apps of great value in Industry Analysis of Mobile Internet and Security Research of Android Platform. As examples, two instances of application are presented in this article. The first instance is about the identification of malwares, the second instance is a security research of the in-app advertisement libraries.This article is organised as following:Chapter I is introduction; Chapter Ⅱ is the requirements analysis, introduces the content of research and key methodologies; Chapter Ⅲ and Chapter Ⅳ give the general design and the detailed design of the WebView-based dynamic analysis system for Android Apps respectively, describe the design and implementation of the system; Chapter V presents case studies; Chapter VI is the summary of the article.