作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2013, Vol. 39 ›› Issue (5): 144-147. doi: 10.3969/j.issn.1000-3428.2013.05.031

• 安全技术 • 上一篇    下一篇

基于Android平台的访问权限机制优化方案

吴大勇,郑紫微   

  1. (宁波大学通信技术研究所,浙江 宁波 315211)
  • 收稿日期:2012-05-28 出版日期:2013-05-15 发布日期:2013-05-14
  • 作者简介:吴大勇(1988-),男,硕士研究生,主研方向:信息安全,数字无线通信;郑紫微,教授
  • 基金资助:
    国家科技重大专项基金资助项目(2011ZX03002-004-02);浙江省重点科技创新团队基金资助项目(2012R10009-04);浙江省杰出青年科学基金资助项目(R1110416);教育部高等学校博士学科点专项科研基金资助项目(20113305110002);宁波市科技创新团队基金资助项目(2011B81002)

Optimization Scheme of Access Permission Mechanism Based on Android Platform

WU Da-yong, ZHENG Zi-wei   

  1. (Institute of Communication Technology, Ningbo University, Ningbo 315211, China)
  • Received:2012-05-28 Online:2013-05-15 Published:2013-05-14

摘要: 为提高Android平台访问权限机制的安全性,提出一种基于Android平台的访问权限安全优化方案。将应用程序权限定向分为4类,获取不同权限组合的种类,量化其权限组合的安全威胁值,同时考虑免费应用程序更有可能是恶意程序的特点,通过应用程序权限安全威胁值判断其安全威胁级别。实验结果表明,该方案能有效区分应用程序的安全威胁级别,准确判断应用程序的安全威胁程度,提高Android访问控制安全性。

关键词: Android平台, 访问权限, 权限分类, 权限组合, 安全威胁值, 定向分类

Abstract: To improve the problem of the security of Android access permission mechanism, this paper proposes an optimization scheme for access permission security based on Android platform. It divides the Android permission into four categories, acquires categories of different permission combination, quantifies the permission combination security threat values and takes fact that free applications are more likely for malicious applications than paid applications into consideration, for judging application security threat level by application access permission security threat value. Experimental results show that the permission access security mechanism can effectively detect security threat level of applications, judge the degree of application security threat more accurately and achieve the goal of enhancing the security of Android access control.

Key words: Android platform, access permission, permission classification, permission combination, security threat value, directional classification

中图分类号: