Research On Security Evaluation Of Android Application Based On Privilege

In recent years,with the continuous expansion of the market share of the Android system,the malicious application software on the Android platform presents an explosive growth,which poses a serious threat to the privacy and the security of the property.Therefore,how to effectively evaluate the security of application software on the Android platform has become the focus of attention.The main contents of this paper are as follows:(1)Analyze the relevant technical theory of Android platform and study the security threat of Android platform.(2)Through analyzing the sample permissions of malicious applications and benign applications,a mechanism of security threat feature extraction is established.Application of reverse engineering technology to extract the sample application authority information,then use chi-square algorithm and frequency statistics methods of permissions and malicious the relationship between the applied behavior analysis,application permissions for security assessment evaluation factor set,set up a security threat feature extraction mechanism.(3)An improved AHP-fuzzy comprehensive evaluation algorithm is proposed.Traditional AHP and fuzzy comprehensive evaluation algorithm evaluation set resolution is not high,the index weight is not clear,the improved AHP and fuzzy comprehensive evaluation algorithm by triangular fuzzy Numbers and fuzzy to quantify the evaluation grades of interval,to improve the resolution of the evaluation results;At the same time,the index weight is modified by the variation coefficient method to make the weights more scientific,objective and accurate.(4)The improved AHP-fuzzy comprehensive evaluation algorithm was evaluated and validated by the design experiment.Through the detection rate of malicious application software,algorithm evaluation results before and after improvement,benign application with360 mobile security manual rating evaluation results of the analysis,verified the improved AHP and fuzzy comprehensive evaluation algorithm is effective.