计算机技术与发展2024,Vol.34Issue(2) :9-16.DOI:10.3969/j.issn.1673-629X.2024.02.002

Android应用程序漏洞检测方法和工具新进展

Recent Progress on Android Application Vulnerability Detection Methods and Tools

王斌 李峰 杨慧婷 樊树铭
计算机技术与发展2024,Vol.34Issue(2) :9-16.DOI:10.3969/j.issn.1673-629X.2024.02.002

Android应用程序漏洞检测方法和工具新进展

Recent Progress on Android Application Vulnerability Detection Methods and Tools

王斌 1李峰 1杨慧婷 1樊树铭1
扫码查看

作者信息

  • 1. 国网新疆电力有限公司电力科学研究院,新疆 乌鲁木齐 830011
  • 折叠

摘要

Android是移动设备和智能设备的主流操作系统,其安全性受到广泛关注.然而Android应用程序普遍存在漏洞或恶意代码,许多学者对Andriod应用程序的漏洞检测方法开展了研究.由于Android系统发展迅速,且近年来机器学习和深度学习方法成功应用于漏洞检测,该文对2016 年至2022 年间发表的Android应用程序漏洞检测的最新成果进行了总结,阐述了涉及的源代码特征提取方法、基于机器学习/深度学习的检测方法、传统检测方法等,并给出了详细对比表.研究表明,仍缺乏Android专用的源代码漏洞数据集和工具等,以便对基于机器学习/深度学习的Android漏洞检测方法提供更有效的支撑.

Abstract

Android is the mainstream operating system for mobile devices and intelligent devices,whose security has been widely concerned.Unfortunately,vulnerabilities or malicious code are often concealed in Android applications.Many scholars have studied the vulnerability detection methods for Android applications.Due to the rapid development of Android system and the successful application of machine learning and deep learning methods in vulnerability detection in recent years,we survey the latest achievements of Android ap-plication vulnerability detection published from 2016 to 2022,describe the involved source code feature extraction methods,detection methods based on machine learning/deep learning,traditional detection methods,and propose detailed comparison lists.The review shows that source code vulnerability data sets and tools dedicated to Android is still needed,which can provide more effective support for Android vulnerability detection methods based on machine learning/deep learning.

关键词

数据安全/移动设备安全/Android应用程序/漏洞检测/机器学习/深度学习

Key words

data security/mobile security/Android application/vulnerability detection/machine learning/deep learning

引用本文复制引用

基金项目

国家自然科学基金(61771416)

出版年

2024
计算机技术与发展
陕西省计算机学会

计算机技术与发展

CSTPCD
影响因子:0.621
ISSN:1673-629X
参考文献量10
段落导航相关论文