The Analysis And Design Of Financial Terminal Security Mechanism Based On Seandroid

In recent years, with the popularity of Android financial terminals, their functions are more and more diversified, and the stored information is becoming more and more sensitive. As a result, the security threats of mobile financial terminals emerge in endlessly. At present, The main security issues of financial terminals are sensitive documents access, financial peripherals illegal access, network communication security and malicious software, etc.SEAndroid, which is proposed in Android4.3 operation system, is an enhanced security suite based on SELinux. And in this thesis, active defense security mechanism and passive defense security management software are designed and implemented on the basis of SEAndroid. First of all, security mechanism is designed from three aspects of text file, device file and network communication, and text file security enhancement is mainly realized by file access control enhancement, database encryption and content encryption. For the security of device file, the scheme of improving level communication security and file access control are put forward on the basis of detailed research of Android device driver development framework. Network communication security is of vital importance in the field of mobile devices, so measures of HTTPS, open port scanning and network firewall are taken to improve financial terminal network communication security from system level and application level. Secondly, security management software is designed from five aspects of log monitoring, malicious software testing, software management, process management and server design, and in this way, we can monitor system and malicious attacks from all aspects in real time.Lastly, function and performance test show that the function and performance of security mechanism and security management software have reached the expected target, and they greatly improved the security of finacial terminals from two aspects of active and passive. The system designed in this thesis can effectively defense more than 90% malicious attacks.