移动应用安全生态链构建方法

发布时间：2018-01-23 03:24

本文关键词： 移动应用安全源代码作者溯源安全加固渠道监测安全检测　出处：《软件学报》2017年11期 　论文类型：期刊论文

【摘要】：移动应用软件安全检测和防护是软件安全领域中的研究热点.传统的安全解决方案是安全厂商将其开发的APP安装到用户终端进行保护,但对于安全意识薄弱的普通用户而言,他们不了解安全威胁的严重性和安全管理APP的重要性,终端缺少安全威胁的防御能力,需要从威胁发生的源头和传播途径进行保护.从威胁发生的源头、途径和终端出发,实现了基于编程风格的源代码作者溯源追踪、移动应用安全加固及渠道监测、基于深度学习的移动应用安全检测,构建移动应用安全生态链,保障用户个人信息安全.在实际应用环境中验证了所提出方法的有效性,结果显示,该方法能够达到应用全方位安全防护的目的.另外,也对未来的研究方向进行了展望.
[Abstract]:Security detection and protection of mobile application software is a research hotspot in the field of software security. The traditional security solution is to install the APP developed by the security manufacturer to the user terminal for protection. However, for the ordinary users with weak security awareness, they do not understand the seriousness of the security threat and the importance of security management APP, and the terminal lacks the ability to defend against the security threat. From the source, path and terminal of the threat, the author traceability of source code based on programming style is realized. Mobile application security reinforcement and channel monitoring, mobile application security detection based on in-depth learning, the construction of mobile application security ecological chain. The effectiveness of the proposed method is verified in the practical application environment. The results show that the method can achieve the purpose of comprehensive security protection. In addition. The future research direction is also prospected.
【作者单位】：北京邮电大学网络空间安全学院;
【分类号】：TP309
【正文快照】： 随着移动互联网的飞速发展和智能终端的广泛普及,移动应用在满足人们日常工作和生活需要的同时,也面临越来越多的安全威胁.2015年,国家互联网应急中心(CNCERT/CC)[1]通过自主捕获和厂商交换,共捕获移动互联网恶意程序数量近148万个,比2014年增长了55.3%,而且主要针对安卓平台.

【相似文献】