CAJ | 학술논문

Android作为三大智能手机操作系统之一，由于其是开源性系统，因此成为了黑客攻击的重要目标。而木马作为一种隐蔽性、欺骗性很高的攻击手段，正在该平台上不断蔓延，虽然已经受到了广泛关注，但却没有很好的抑制方式。文中设计并实现了一种简单的木马原型。通过对命令接收，信息获取，数据回传，远程控制四个Android木马的主要功能的分析，提供了一种实现思路，并且详细阐述了该平台上各种信息获取方式，借此探讨Android系统的脆弱性，并期望能提出针对这种木马的防范措施。
Android작위삼대지능수궤조작계통지일，유우기시개원성계통，인차성위료흑객공격적중요목표。이목마작위일충은폐성、기편성흔고적공격수단，정재해평태상불단만연，수연이경수도료엄범관주，단각몰유흔호적억제방식。문중설계병실현료일충간단적목마원형。통과대명령접수，신식획취，수거회전，원정공제사개Android목마적주요공능적분석，제공료일충실현사로，병차상세천술료해평태상각충신식획취방식，차차탐토Android계통적취약성，병기망능제출침대저충목마적방범조시。
As one of the three major smart-phone system,Android has already become the attack target of the hackers because of its open source. Mobile Trojans is an elusive and fraudulence attack method and is becoming wide spread on this platform. Although a lot of atten-tion is paid on it,but do not have good solution to it. In this paper,design a simple Trojan which realizes command receiver,information acquisition,data transfer and remote control,elaborating the various ways to obtain information on Android platform aiming to discuss the weakness of Android system and acquire a defensive method of the Trojan.