CAJ | 학술논문

电力移动智能终端中存储的用户身份、电力运维数据、电网管理数据等大量重要信息使其具有巨大的攻击价值。Android作为目前全球最广泛使用的移动终端操作系统，也为相当规模的电力移动智能终端所应用，然而，其开放性（第三方开发）等特征在增强其功能和提升应用灵活性的同时也为系统漏洞、恶意应用等多种类型的攻击提供了渠道。文章通过对Android系统安全模型和安全威胁的研究，总结了针对Android平台上的电力移动智能终端的远程和本地攻击、隐私窃取、通信劫持和远程控制技术及方法。最后，提出了在基于Android系统的电力移动智能终端上加载恶意代码检测模块和操作系统加固的建议方案。
전력이동지능종단중존저적용호신빈、전력운유수거、전망관리수거등대량중요신식사기구유거대적공격개치。Android작위목전전구최엄범사용적이동종단조작계통，야위상당규모적전력이동지능종단소응용，연이，기개방성（제삼방개발）등특정재증강기공능화제승응용령활성적동시야위계통루동、악의응용등다충류형적공격제공료거도。문장통과대Android계통안전모형화안전위협적연구，총결료침대Android평태상적전력이동지능종단적원정화본지공격、은사절취、통신겁지화원정공제기술급방법。최후，제출료재기우Android계통적전력이동지능종단상가재악의대마검측모괴화조작계통가고적건의방안。
Mobile intelligent terminals used in electrical systems store much information,including user identity,operation data of electricity, management information,and etc, which makes them have a great value of being attacked. . As the world's most widely used mobile operating system, Android is applied in a large number of applications within the area of power grid. However, the openness (third-party developers) has provided the possibility to vulnerabilities, malicious behaviors and other types of attacks along with the powerful functionality and flexibility. This paper,based on the Android system security model and existing security threats research, summarizez security threats in Android security, including remote and local attacks, privacy theft, hijacking and remote control techniques. And then this paper provides a corresponding solution by adding malicious code detection module and operating system reinforcement which can help us improve the security of grid management system.