The Design And Implementation Of Security Container For Mobile Platform

Now the mobile Internet has profoundly changed people's way of life,mobile devices have become an indispensable part of our daily life,improving quality of people's life.More and more people used to do all kinds of work and life affairs in the mobile terminal,such as mobile payment,online shopping,email etc.Mobile devices store more and more people's information.Android mobile phones rank first in the global market share.Because of the huge user base and the open source of Android,Android's security issues are more prominent.Android equipment information security becomes a hot topic in our society,many enterprises and research institutions put forward their own security scheme to solve this problem,such as some researchers strengthen the security of mobile devices by porting SELinux to the Android platform,mobile security products developed by the major Internet Co that can detect malicious applications and other system vulnerabilities.In this paper,in order to solve the security problem of Android mobile phone,we adopt the idea of security isolation.We isolate two operating environments in on the Android device.In the realization of the isolated running environment,the Linux container technology is becoming more and more popular because of its fast switching and less resource consumption.At the same time,there are a lot of companies and research institutions port container virtualization technology to the mobile platform.At present,Android 5.x 34.6%in the whole Android market share,becoming the main proffered choice among the versions of Android.The Android 5.x has been greatly improved compared with the previous version in terms of security So this paper we choose Android 5.1.1 as the platform to achieve our work.The main work of this thesis is as follows:(1)On the Android platform,we realize a prototype system of mobile container virtualization.(2)We use SELinux in host and container improving the security of the system.(3)A security protection module is added to the shared mechanism of host and container in order to improve the isolation of host and container.