移动互联网的应用市场版权剽窃行为检测研究

全球移动互联网发展如火如荼，移动应用的安全成为移动互联网时代亟待解决的研究问题。现有的移动应用产权剽窃检测的研究主要集中在构造高效的移动恶意代码（重打包）检测方案或不同场景下的剽窃或克隆行为检测方案，而对移动应用的外观产权剽窃、复杂或未知的恶意篡改或剽窃行为的检测尚未过多关注，项目拟对如下问题展开研究：1）构造视图活动特征图，并结合节点的敏感API调用轨迹，构成一个静态和动态方法相结合的外观检测方案，满足准确性与鲁棒性需求；2）基于寄存器状态的形式化方法描述App功能，并构造一个语义特征的侵权应用识别方案；3）提供一个大规模App分析的一般性方法，给出一个有效方案在复杂攻击的环境下仍然有较高的计算效率。本项目的研究内容将丰富移动恶意重打包、版权剽窃检测的理论，为复杂多样的移动应用环境提供安全检测与防范方案，利于推动良性移动产业链的形成和发展。

The global mobile Internet and intelligent terminal development in full swing, the safety of the mobile applications for mobile Internet era turns into a research problem to be solved. Existing mobile application property of plagiarism detection focuses on constructing efficient malware code (repackaging) detection schemes or testing plagiarism or clone behavior schemes under different scenarios. But the GUI property theft of the mobile application, and plagiarism detection with semantic or unknown malicious tampering has not been much attention. The project intends to research on the following issues: 1) We propose the view activity characteristics, combining with the sensitive nodes API calls trace. Thus we constitute a combination of static and dynamic methods of GUI testing plan, meeting the demand of accuracy and robustness. 2) A description based on the state of the register formalism method is proposed. And an identification scheme for infringement application is constructed by semantic characteristics. 3) We provide a general scheme for the analysis on the large-scale App. This scheme provides an effective solution and still has high computing efficiency in the context of vicious complex attacks. This project would enrich identification theory for mobile malicious repackage and copyright of plagiarism. For complex variety of mobile market, safety detection and prevention would be provided. All of these could help to promote the healthy formation and development of mobile industry chain.