SCBox——保护Android应用网络通信的安全工具

发布时间：2018-01-13 16:43

本文关键词：SCBox——保护Android应用网络通信的安全工具　出处：《计算机工程与应用》2017年18期 　论文类型：期刊论文

【摘要】：Android应用程序的社交、支付等功能给人们的生活带来了很大的便利,但是WIFI热点攻击、应用程序加密协议误用等问题的不断出现导致Android应用的网络通信非常容易遭受中间人攻击。针对这种威胁,实现了一个高效的、可配置安全优化策略的、保护Android应用网络通信的安全工具SCBox(Secure Communication Box)。SCBox是运行在Android系统上的一个应用程序,它基于应用程序插件化,可以让第三方应用导入其中并正常运行在一个安全沙箱中。通过代理第三方应用程序的网络通信,SCBox与中继服务器建立安全连接,然后数据经过中继服务器的转发安全到达应用服务器,实现加密的安全通信。相比较于保护Android应用网络通信的其他方案,SCBox不用修改操作系统和第三方应用程序代码,解决了这种修改源代码方案面临的部署困难的问题。而且,SCBox还可以配置安全优化策略,在静态导入阶段选择是否保护此应用程序、与哪个中继服务器建立安全连接,在动态运行阶段根据应用程序的上下文选择是否授予相应权限,限制了应用程序中第三方库的恶意上传隐私数据行为。实验证明,SCBox可以有效抵御WIFI热点攻击和加密协议误用等问题造成的中间人攻击,而且不会带来太大的性能消耗。
[Abstract]:The social, payment and other features of Android apps bring great convenience to people's lives, but WIFI hotspots attack. The problem of application encryption protocol misuse has resulted in the network communication of Android application being vulnerable to man-in-the-middle attack. In view of this threat, an efficient network communication is implemented. That can configure security optimization policies. SCBox(Secure Communication Box, a security tool for protecting Android application network communication. SCBOX is an application running on a Android system. It is based on application plugins and allows third-party applications to import and function in a security sandbox. Network communication through proxy third-party applications. The SCBox establishes a secure connection to the relay server, and the data then passes through the relay server's forwarding security to the application server. Compared with other schemes to protect Android application network communication, SCBOX does not need to modify the operating system and third party application code. Resolves the difficult deployment of this modified source code solution, and SCBox can also configure security optimization policies to select whether to protect the application during the static import phase. Establish a secure connection with which relay server, and at dynamic run time select whether to grant the appropriate permissions, depending on the context of the application. It limits the malicious uploading of privacy data by the third party library in the application. The experiment proves that the SCBOX can effectively resist the man-in-the-middle attack caused by the WIFI hot spot attack and the misuse of encryption protocol. And will not bring too much performance consumption.
【作者单位】：北京邮电大学智能通信软件与多媒体北京市重点实验室;
【基金】：国家自然科学基金(No.61370195,No.U1536121)
【分类号】：TN918
【正文快照】： 北京邮电大学智能通信软件与多媒体北京市重点实验室,北京100876Beijing Key Lab of Intelligent Telecommunication Software and Multimedia,Beijing University of Posts and Telecommu-nications,Beijing 100876,ChinaCAO Ze,ZHANG Wen,NIU Shaozhang.SCBox:efficient,pol

【相似文献】