Research And Implementation Of Trojan Analysis And Detection Technology Based On Android Platform

With the vigorous development of mobile Internet,smartphones are rapidly popularized and widely used.Android mobile phone due to high market share,has become an indispensable part of people's lives.However,because Android is an open source system that brings convenience to users,it also brings security risks,especially the intrusion of the Trojan to the Android platform.After the user's mobile phone is infected with the Trojan,it will cause a lot of losses such as privacy leaks,tariffs steal and so on.Therefore,the study of Trojan and its detection technology based on Android has important practical significance and is also the main research focus of information security workers.Firstly,the research background of Trojan detection based on Android and the research status at home and abroad are analyzed in this paper.Through the research of Android platform,especially the Android security mechanism,the security defects of Android system and the reasons of Trojan invasion are analyzed.After studying the transmission mechanism and attack means of Trojan,the operation principle of Trojan based on Android is analyzed in this paper.By comparing the current four main Trojan detection technology based on Android,their advantages and disadvantages are analyzed.On this basis,a set of Android Trojan detection system based on signature detection is designed and implemented in this paper.The signature detection is used as the core in this system,combined with the examination of the system access permissions applied for by the application,in order to build a complete static Trojan detection system to achieve effective killing of Trojan based on Android.The file scanning,signature matching,permission scanning,sensitive permissions matching and other functional modules are included in this system.Among them,the MD5 algorithm is used in the file scanning module to extract the characteristic information from the application,which ensures the uniqueness and irreversibility of the signature.And the implementation of efficient string matching algorithm used in the signature matching part,both to achieve the rapid detection of samples,but also to ensure the speed of the system.Signature detection can only detect Trojan already existing in the signature database.Therefore,the permission detection module is added in the system,which can detect the unknown Trojan and thus make up for the defect of signature detection.Finally,the Trojan detection system designed in this paper is implemented on the Android platform,and the performance testing of each functional module is performed.The test results show that the system can effectively detect the known or unknown Trojan program of Android platform,and the permission detection plays a certain role,which achieves the expected result of the design.