一种Android应用安全审核认证系统的设计方案

针对恶意APK文件泛滥问题,综合静态、动态安全检测和APK重签名技术,设计了一套安全的Android应用审核认证系统,它由基于Web应用的安全审核平台和智能终端APK安全认证模块构成。安全审核平台利用强健的调度子系统完成了批量APK应用的提交、安全检测、重签名、发布及统计查询功能,保证了发布到官方应用商城中APK的安全性;智能终端APK安全认证模块引入了新型的重签名技术,可有效判断APK应用是否由"官方"安全认证。由此可见,该系统从"源"(应用商城)到"端"(智能终端)保障了APK文件的安全。

Design scheme ofaudit and authentication system of security Android application

Based on static detection, dynamic detection and APK repeating signature, in this paper a security audit and authentication system of Android application has been designed in order to deal with spreading of Malware. The system is composed of security audit platform based on web application and APK security authentication subsystem in intelligent terminal. The security audit platform can realize the tasks of submittion, security detection, repeating signature, release and statistical query of APK application in batch simultaneously by taking advantage of robust scheduling subsystem, so it guaranteesthe security of APK which is released in the official application mall. The novel APK repeating signaturehas been introduced into APK security authentication subsystem in intelligent terminal and the APK application can be obtained an official authentication in security.Therefore, the system safeguards the security of APK file fundamentallyfrom APP market to intelligent terminal.