Resrarch On Key Technology Of Privacy Leak Detection In Android Applications

With the rapid development of the mobile Internet,mobile devices and intelligent terminal occupy a higher market share,and caused the mobile security problems increasingly serious.Among them,personal privacy data security issues under Android platform are particularly prominent.So,how to protect the privacy data security of users has become an important problem in the process of the development of the mobile Internet.Firstly,we analyze the current situation of the research on privacy leak detection in Android application at home and abroad in this paper,and summarize the advantages and disadvantages of various detection methods and the existing problems,introduce and analyze the related theory and technology.Secondly,based on component level analysis,we construct a component level model of the static privacy leak detection.The model includes two parts: analysis module and detection module.The analysis module is used to analyze the Android application,through the modeling of each component's lifecycle and callback method,we generate the APK entry sets and a program call graph.After,we analyze the control flow and data flow based on the component model.Finally get the data flow diagram of components.And the detection module is based on the data flow diagram of the analysis module,detects the static taint in the component and between components,to check whether there is a communication path between the Source and the Sink,and to confirm the existence of privacy leak within the application.Then,on the basis of modeling,we use the UML diagram to describe the detection tool,use the flow chart of the static analysis to show the mechanism of the privacy leak detection,and give a function module chart for detection tool,among them using Java language to develop a Android application privacy leak detection tool which is called CoDroid.Finally,the experimental results show that the detection tool called CoDroid can successfully detect the privacy leak in an application component or between components,and a number of Android application are tested to vertify the effectiveness of the detection tool.