International Journal of Computer Mathematics Editors’ Report
International Journal of Computer Mathematics Editors’ Report
复制标题
DOI：
10.1080/00207160.2013.867115
复制
发表时间：
2013-11
影响因子：
1.8
通讯作者：
Hwan-taek Lee;Dongjin Kim;Minkyu Park;Seong-je Cho
中科院分区：
文献类型：
--
作者：
Hwan-taek Lee;Dongjin Kim;Minkyu Park;Seong-je Cho
智能手机的用户正在全球范围内迅速扩大。这些设备拥有用户的安全敏感数据，并随时准备与外界通信。各种恶意软件正在攻击智能手机，特别是Android手机，但现有的Android安全措施并不令人满意。当前Android恶意软件中有三分之一是权限升级攻击，这些攻击试图获取根权限以完全损害Android安全。我们提出了一个检测和预防方案，保护Android免受这种特权升级攻击，试图获得完全访问所有数据。所提出的方案监视来自应用进程的重要系统调用。如果系统调用必须由特权Android系统组件在正常操作中调用，则该方案将阻止其执行。该方案可以检测和防止新的和未知的恶意软件，以及目前已知的一个。
The users of smartphones are rapidly expanding worldwide. These devices have user’s security-sensitive data and are ready to communicate with the outside world. Various kinds of malware are attacking smart-phones, especially Android phones, but the existing Android security measure does not work satisfactorily. One-third of the current Android malware were privilege escalation attacks, which try to obtain root-privilege to fully compromise the Android security. We propose a detection and prevention scheme that protects Android against such privilege escalation attack that tries to get full access to all data. The proposed scheme monitors important system calls from an application process. If the system call must be called by privileged Android system components in normal operation, the scheme prevent it from executing. The scheme can detect and prevent new and unknown malware as well as currently known one.