基于多因素聚类选择的Android应用程序分类风险评估方法

大多数现有的Android应用程序风险评估根据经验直接指定因素的权重，通过统计少量因素的使用频率来计算安全风险。提出一种新的Android应用风险评估方法，能够同时提供定量和定性评估。该方法融合系统权限、API调用、Intent Filter的action属性以及数据流等多种风险因素，基于因素的风险分类与加成进行风险赋值，基于层次聚类对因素子集进行权重分配。实验表明，评估结果能够有效地反映Android应用程序的真实安全风险。

Classified risk assessment method of Android application based on multi-factor clustering selection

Most existing risk assessments of Android applications directly assign weights to factors according to experience,and calculate security risks by counting the frequency statistics of few factors.A new method for risk assessment of Android applications is proposed,which can provide both quantitative and qualitative assessment.This method integrates multiple risk factors such as system permissions,API calls,the action properties of Intent Filter,and data flow.The risks of factors are assigned based on their risk classification and addition,and the weights of factor subsets are distributed based on hierarchical clustering.Experiments show that the assessment results can effectively reflect the real security risks of Android applications.