The Robustness Test Of Inter-component Communication In Android

With the development of Android system, Android applications become more and more important in people’s daily lives. Generally, the popular Android application has already downloaded a million times, so once Android application security problems occur, it may bring immeasurable losses. In recent years, there are many serious accidents caused by Android application security all over the world. Application component communication security is an important part of Android application security issues. Therefore, this paper researched the security of communication between Android application components.This paper analyzed and researched the general security issues of Android application component, and then put forward a robust testing program for communication between the components of Android application. This program completed the robust testing of components communication based on fuzzing testing method. It is mainly composed of two parts, PC-side and mobile side, and this paper realized the testing program Fuzzer APP on mobile side. Firstly, this program made a static analysis on the installation package of the application under testing, and acquired detailed information of static registration and dynamic registration. Secondly, with these components information and the standard action provided by Android SDK, a specific test case message can be created by the test cases presented in this paper, and In this paper, we use as a carrier test Intent message, then a certain transmission strategy send these created Intent message to the application components under testing. Finally, after the collection and analysis of the output of application under testing, Android system and test system during testing, this paper obtained a test conclusion of the corresponding applications.This paper tested massive popular Android applications by the program mentioned above, which got a large number of test data. Through analysis of test data, we found that sending specially built Intent message to Android applications can cause applications crash, even causing the cascading collapse of system services and the restart of Android system. In addition, there is another serious problem. The 10 applications, such as Tmall shopping, weather reader, exposed problems during testing, which would cause serious security problem of loss of privacy, application denial-of-service. In the end, by the comparison with other programs, it demonstrates the effectiveness of test program and the practicability of test tools.