Soundness-guided security analysis for android applications

Android 应用程序健全性引导的安全分析

• 批准号: DP170103956
• 负责人: Prof Jingling Xue
• 金额: $ 25.02万
• 依托单位: The University of New South Wales
• 依托单位国家: 澳大利亚
• 项目类别: Discovery Projects
• 财政年份: 2017
• 资助国家: 澳大利亚
• 起止时间: 2017-01-01 至 2020-12-31
• 项目状态: 已结题
• 来源: https://dataportal.arc.gov.au/RGS/Web/Grants/DP170103956
• 关键词: Soundness; guided; security; analysis; android

This project aims to develop a soundness-guided programme analysis to mitigate security threats caused by reflection and dynamic class loading in Android apps, without compromising precision and scalability. Both dynamic code update techniques are widely used in benign and malware apps, but state-of-the-art malware analysis tools ignore or mishandle them, missing security threats and vulnerabilities. The resulting open-source security analysis tool will allow software industries and enterprises (from national security, finance, banking to healthcare, retail, telecommunications) to test their mobile software effectively for code defects or security threats early at software development time at significantly reduced cost.

该项目旨在开发一种健全性引导的程序分析，以减轻 Android 应用程序中反射和动态类加载造成的安全威胁，同时不影响精度和可扩展性。这两种动态代码更新技术都广泛用于良性和恶意软件应用程序，但最先进的恶意软件分析工具会忽略或错误处理它们，错过安全威胁和漏洞。由此产生的开源安全分析工具将允许软件行业和企业（从国家安全、金融、银行到医疗保健、零售、电信）在软件开发初期有效地测试其移动软件的代码缺陷或安全威胁，并显着降低成本。