Research And Implementation Of Fine Grained Permission Management In Android Applications Via System Function Hook

With the rapid growth of Android operating system market share,the security architecture and authority management of the Android has attracted more attention.The shortcomings of the Android and the third party application have brought many problems that threaten the security of user's information.The coarse-grained authorization in Android is the important one of many problems.However,normal users cannot change the way of the application's one-time permission request and permanent use.The existing Android rights management model cannot meet the needs of users with finer management and data configuration.The only way to restrict permission is uninstall the application.In this paper,a fine-grained authorization management model,Hook-based System Functional Response(HSFR),is proposed combined with the simulation data.On the one hand,HSFR enhances the original management mechanism to control the request permission of application.On the other hand,it can guarantee the device to return the real or unreal data information according to the configuration.The HSFR model performs a preset rule matching interception modification on the known functions of the system.Nevertheless,it cannot cope with some carefully crafted permission requests.Due to the fragmentation of the Android,the functions used by different systems are not consistent,resulting in the lack of universality of most of the existing enhanced models.Additionally,we make full use of the log data that has less attention on the Android security reinforcement.We can make use of the log data to solve the problem of inconsistent function list and permissions feedback in different Android platform.Our method provides a strong complement of the imperfect rules and enhances the adaptability of HSFR.Finally,in the different equipment environment,we use the real applications to carry out a comprehensive test.The experimental results show that the proposed method achieves fine-grained management of Android permissions efficiently and flexibly with the fewer changes to the system than other existing Android enhancement frameworks.