CAJ | 학술논문

本文针对 Android 应用中普遍存在的用户隐私窃取问题，提出了基于行为链的应用隐私窃取行为检测方法，该方法能细粒度地定位 Android 应用中存在的信息泄露源和信息泄露点，利用 WxShall 算法快速计算信息泄漏源和信息泄露点之间的可达性，自动化地追踪 Android 应用中存在的隐私信息传递路径，实现了对 Android 应用中隐私窃取行为的完整检测和分析．对1259款应用检测结果表明，本方法正确性超过95．1％，算法复杂度仅为 WarShall 算法的5．45％，检测效果优于 Androgurad 和 Kirin．
본문침대 Android 응용중보편존재적용호은사절취문제，제출료기우행위련적응용은사절취행위검측방법，해방법능세립도지정위 Android 응용중존재적신식설로원화신식설로점，이용 WxShall 산법쾌속계산신식설루원화신식설로점지간적가체성，자동화지추종 Android 응용중존재적은사신식전체로경，실현료대 Android 응용중은사절취행위적완정검측화분석．대1259관응용검측결과표명，본방법정학성초과95．1％，산법복잡도부위 WarShall 산법적5．45％，검측효과우우 Androgurad 화 Kirin．
The increasing presence of Android privacy leakages poses a significant privacy risk for Android smartphone users.This paper proposes a privacy leakage detection method based on behavior chain,which can achieve the fine-grained location of the source and points of the information leakage.With the WxShall algorithm,we can calculate the accessibility between the leak-age source and leakage points,and detect the transfer path of privacy in Android applications.The detections of 1259 Android appli-cations show that the accuracy of this algorithm reaches 95.1% and the complexity accounts for 5.45% of WarShall algorithm.The results of the experiments demonstrate that the method is better than Androgurad and Kirin.