Android application privacy protection mechanism based on virtual machine bytecode injection
To solve the abuse of the Android application permission mechanism, a method of Android application access control based on virtual machine bytecode injection technology was proposed.The security policy in the form of virtual machine bytecode was generated according to the user’s security requiremen...
Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | zho |
| Published: |
Editorial Department of Journal on Communications
2021-06-01
|
| Series: | Tongxin xuebao |
| Subjects: | |
| Online Access: | http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2021115/ |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1841539276988219392 |
|---|---|
| author | Yubo SONG Qi CHEN Rui SONG Aiqun HU |
| author_facet | Yubo SONG Qi CHEN Rui SONG Aiqun HU |
| author_sort | Yubo SONG |
| collection | DOAJ |
| description | To solve the abuse of the Android application permission mechanism, a method of Android application access control based on virtual machine bytecode injection technology was proposed.The security policy in the form of virtual machine bytecode was generated according to the user’s security requirement and usage scenario, and injected into the coding unit of Android application that involves dangerous permission request and sensitive data access, to realize dynamic application behavior control.Tests on applications crawled from four mainstream domestic App stores show that the method can effectively intercept sensitive API calls and dangerous permission requests of legitimate App programs and implement control according to pre-specified security policies.Also, after injecting virtual machine bytecode, most of the App program operation is not affected by the injected code, and the robustness is guaranteed.The proposed method has a good universality. |
| format | Article |
| id | doaj-art-5a42de3e21e44ecea599b1a31b9db607 |
| institution | Kabale University |
| issn | 1000-436X |
| language | zho |
| publishDate | 2021-06-01 |
| publisher | Editorial Department of Journal on Communications |
| record_format | Article |
| series | Tongxin xuebao |
| spelling | doaj-art-5a42de3e21e44ecea599b1a31b9db6072025-01-14T07:22:11ZzhoEditorial Department of Journal on CommunicationsTongxin xuebao1000-436X2021-06-014217118159742213Android application privacy protection mechanism based on virtual machine bytecode injectionYubo SONGQi CHENRui SONGAiqun HUTo solve the abuse of the Android application permission mechanism, a method of Android application access control based on virtual machine bytecode injection technology was proposed.The security policy in the form of virtual machine bytecode was generated according to the user’s security requirement and usage scenario, and injected into the coding unit of Android application that involves dangerous permission request and sensitive data access, to realize dynamic application behavior control.Tests on applications crawled from four mainstream domestic App stores show that the method can effectively intercept sensitive API calls and dangerous permission requests of legitimate App programs and implement control according to pre-specified security policies.Also, after injecting virtual machine bytecode, most of the App program operation is not affected by the injected code, and the robustness is guaranteed.The proposed method has a good universality.http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2021115/Android securityprivacy protectionsecurity strategyvirtual machine bytecode |
| spellingShingle | Yubo SONG Qi CHEN Rui SONG Aiqun HU Android application privacy protection mechanism based on virtual machine bytecode injection Tongxin xuebao Android security privacy protection security strategy virtual machine bytecode |
| title | Android application privacy protection mechanism based on virtual machine bytecode injection |
| title_full | Android application privacy protection mechanism based on virtual machine bytecode injection |
| title_fullStr | Android application privacy protection mechanism based on virtual machine bytecode injection |
| title_full_unstemmed | Android application privacy protection mechanism based on virtual machine bytecode injection |
| title_short | Android application privacy protection mechanism based on virtual machine bytecode injection |
| title_sort | android application privacy protection mechanism based on virtual machine bytecode injection |
| topic | Android security privacy protection security strategy virtual machine bytecode |
| url | http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2021115/ |
| work_keys_str_mv | AT yubosong androidapplicationprivacyprotectionmechanismbasedonvirtualmachinebytecodeinjection AT qichen androidapplicationprivacyprotectionmechanismbasedonvirtualmachinebytecodeinjection AT ruisong androidapplicationprivacyprotectionmechanismbasedonvirtualmachinebytecodeinjection AT aiqunhu androidapplicationprivacyprotectionmechanismbasedonvirtualmachinebytecodeinjection |