Research And Implementation Of Autimated Security Testing Based On The Android Platform

As the operating system of the mobile end devices the Android system has been the rapid development in recent years,to provide users convenience of life and work for its users.At the same time,due to the openness of the Android platform,some Android applications there have been some serious bad behavior on security issues.On the one hand,the release and supervision of the Android application are not stringent enough by Google,which leads that numerous malicious programs can spread through a variety of channels,many illegal application can be installed throght these communication channels.On the other hand,beause of the permission mechanisms of Android system,which often leads to cases of abuse of Android application permissions,resulting in the leakage of the users' sensitive information or private information.In response to these issues,start with special permissions mechanism of Android system,the thesis designs and implements automated security testing system AAST for Android platform.AAST system combines static analysis results of Android applications to complete automated testing for the Android application;implements monitoring applications for Android-sensitive behavior in Android applications.In the process of the program is running,completed its sensitive information monitoring.AAST system monitor the sensitive interface calls of Android applications in a dynamic test automation process.Compare to permission apply to get a detailed results of the final report,to achieve the purpose for Android applications to detect the security of Android system.This thesis gets on the experiment and analysis of results from the comprehensive of the AAST functional.Compared with other monitoring methods to verify that the AAST system designed by the thesis is more efficient and comprehensive.