Research And Implementation Of Intrusion Detection System Based On Android Mobile Phone Platform

In recent years, the replacement of generations of mobile phone’s hardware and software has entered a stage of rapid development. Smart phones become more and more powerful, which is not only giving the user more and more convenience, but also giving users security risks. So it cannot be ignored. Android operating system has broad application space in the smart phone platform. The share has exceeded Apple’s operating system and become the main force in the market. However, due to the advantages------ huge users of Android mobile platform, the strong open source, easy to download and install, it has also become a main target that malicious software attacks. By pretending and inducing users to install illegal software, attacking system vulnerabilities, etc., the malicious software can obtain system privileges; steal user privacy information, user account passwords and other data. That will cause greater trouble for Android smart phone platform user’s normal use. So how to improve the safety and reliability of Android smart phone platform will become one of the problems that mobile security has faced.Mobile phone virus protection software like passive defense and killing the virus are more popular. The introduction of "Cloud" killing technology has not achieved promotion of Android phones active defense and detection capabilities. Intrusion Detection technology for its initiative and timeliness characteristics is introduced into the security advantages of smart phone platform, and it will provide new research directions for the security.The intrusion detection technology has greater practicality and value for computer and network security detection and prevention, but the research that will be applied to Android mobile platform has just started. The key technology to be resolved is still in the research stage. Given the special nature of Android smart phone platform, and it is limited by the conditions of their own hardware and software design application characteristics, the design of intrusion detection system of the platform must be considered these factors: the detection efficiency, energy consumption, moderate traffic and other problems. At the same time, the design must make the appropriate analysis and research on system optimization strategy and solutions.In this dissertation, we analyze the current status of the development of Android mobile platform system, compare various types of mainstream detection model, describe their respective advantages and bottlenecks in detail and research the key technology involved in the development of the system. We design the basic system architecture based on them,make a detailed design and implementation for the system involves monitoring modules, fast detection module, HMM anomaly detection module, response module and a storage module. The correlation analysis technology under this application platform for rapid detection and anomaly detection to HMM model used in this research platform for innovation. And based on this technology, we have improved the basic architecture of the system. Several functional modules involved monitoring, rapid detection, HMM anomaly detection, response and storage have been carried out a detailed design and implementation. We have also given some core codes about the relevant functional modules. Finally, We test the main function modules of the system, horizontal comparison of the performance of the system, the experimental results are analyzed to verify the feasibility of the detection model.