Soundness-guided security analysis for android applications

Android 应用程序健全性引导的安全分析

• 批准号: DP170103956
• 负责人: Prof Jingling Xue
• 金额: $ 25.02万
• 依托单位: The University of New South Wales
• 依托单位国家: 澳大利亚
• 项目类别: Discovery Projects
• 财政年份: 2017
• 资助国家: 澳大利亚
• 起止时间: 2017-01-01 至 2020-12-31
• 项目状态: 已结题
• 来源: https://dataportal.arc.gov.au/RGS/Web/Grants/DP170103956
• 关键词: Soundness; guided; security; analysis; android

This project aims to develop a soundness-guided programme analysis to mitigate security threats caused by reflection and dynamic class loading in Android apps, without compromising precision and scalability. Both dynamic code update techniques are widely used in benign and malware apps, but state-of-the-art malware analysis tools ignore or mishandle them, missing security threats and vulnerabilities. The resulting open-source security analysis tool will allow software industries and enterprises (from national security, finance, banking to healthcare, retail, telecommunications) to test their mobile software effectively for code defects or security threats early at software development time at significantly reduced cost.

该项目旨在开发一个声音引导的程序分析，以减轻Android应用程序中反射和动态类加载造成的安全威胁，而不影响精度和可扩展性。这两种动态代码更新技术都广泛用于良性和恶意软件应用程序中，但最先进的恶意软件分析工具会忽略或错误处理它们，从而遗漏安全威胁和漏洞。由此产生的开源安全分析工具将使软件行业和企业（从国家安全、金融、银行到医疗保健、零售、电信）能够在软件开发早期以显著降低的成本有效地测试其移动的软件的代码缺陷或安全威胁。