一种增强的Android安全机制模型

随着Android系统的日益流行,其安全问题受到了越来越多的关注.尽管Android Permission机制能在一定程度上保证安全性,但在实际应用中却缺乏灵活性,基于此提出了一种与Apex相兼容的策略模型.该方法主要针对Apex的安装程序包Poly.在Ploy安装程序之前先对应用程序和权限进行分析检测,然后将检测分析后的权限呈现给用户.实验结果表明在造成一定性能损失的情况下,新的框架可以有效减少用户所需设置的权限.

An Enhanced Android Security Mechanism Model

With the increasing popularity of the Android system, its security problem has received more and more attention. Although Android Permission mechanism could ensure safety to some ex- tent, it lacks of flexibility in practical applications. Because of this, this paper provides an en- hanced policy framework which is compatible with Apex. The method focuses on the package install- er Poly of Apex. Before Ploy installs the application, first detect and analyze the permission, then present the permissions to users. Experimental results show that even it causes a loss of perform- ance; the new frame earl effectively reduce the number of permission that required user to set.