Android隐式信息流检测的本体模型

doi:10.11772/j.issn.1001-9081.2017071970

计算机应用 ›› 2018, Vol. 38 ›› Issue (1): 61-66.DOI: 10.11772/j.issn.1001-9081.2017071970

• 2017年全国开放式分布与并行计算学术年会(DPCS 2017)论文 • 上一篇下一篇

Android隐式信息流检测的本体模型

刘其源^1,2, 焦健^1,2, 曹宏盛^1,2

1. 北京信息科技大学网络文化与数字传播北京市重点实验室, 北京 100101;
2. 北京信息科技大学计算机学院, 北京 100101

收稿日期:2017-08-11 修回日期:2017-08-30 出版日期:2018-01-10 发布日期:2018-01-22
通讯作者: 焦健
作者简介:刘其源(1992-),男,安徽阜阳人,硕士研究生,CCF会员,主要研究方向:网络安全、智能终端的恶意代码分析;焦健(1978-),男,河北沧州人,副教授,博士,CCF会员,主要研究方向:网络测量、网络安全;曹宏盛(1989-),男,广西钦州人,硕士研究生,CCF会员,主要研究方向:网络安全。
基金资助:
国家自然科学基金资助项目（61370065，61502040）；"十二五"国家科技支撑计划项目子课题项目（2015BAK12B03-03）；网络文化与传播重点实验室开放课题项目（ICDDXN001）。

Ontology model for detecting Android implicit information flow

LIU Qiyuan^1,2, JIAO Jian^1,2, CAO Hongsheng^1,2

1. Beijing Key Laboratory of Internet Culture and Digital Dissemination, Beijing Information Science and Technology University, Beijing 100101, China;
2. School of Computer, Beijing Information Science and Technology University, Beijing 100101, China

Received:2017-08-11 Revised:2017-08-30 Online:2018-01-10 Published:2018-01-22
Supported by:
This work is partially supported by the National Natural Science Foundation of China (61370065, 61502040),the National Key Technology Research and Development Program of the Ministry of Science and Technology of China (2015BAK12B03-03),the Opening Foundation of Key Laboratory of Internet Culture and Digital Dissemination (ICDDXN001).

摘要/Abstract

摘要： 针对传统的信息泄漏检测技术无法有效检测Android应用中存在的隐式信息泄露的问题，提出了一种将控制结构本体模型与语义网规则语言（SWRL）推理规则相结合的Android隐式信息流（ⅡF）推理方法。首先，对控制结构中能够产生隐式信息流的关键要素进行分析和建模，建立控制结构本体模型；其次，通过分析隐式信息泄露的主要原因，给出基于严格控制依赖（SCD）隐式信息流的判定规则并将其转换为SWRL推理规则；最后，将添加的控制结构本体实例与推理规则共同导入到推理引擎Jess中进行推理。实验结果表明：所提方法能够推理出多种不同性质的SCD隐式流，公开样本集的测试准确率达到83.3%，且推理耗时在分支数有限时处于合理区间。所提模型方法可有效辅助传统信息泄露检测提升其准确率。

关键词: Android隐式信息流, 控制结构, 严格控制依赖, 本体, 语义网规则语言

Abstract: Concerning the problem that the traditional information leakage detection technology can not effectively detect implicit information leakage in Android applications, a reasoning method of Android Implicit Information Flow (ⅡF) combining control structure ontology model and Semantic Web Rule Language (SWRL) inference rule was proposed. Firstly, the key elements that generate implicit information flow in control structure were analyzed and modeled to establish the control structure ontology model. Secondly, based on the analysis of the main reasons of implicit information leakage, criterion rules of implicit information flow based on Strict Control Dependence (SCD) were given and converted into SWRL inference rules. Finally, control structure ontology instances and SWRL inference rules were imported into the inference engine Jess for reasoning. The experimental results show that the proposed method can deduce a variety of implicit information flow based on SCD with different nature and the testing accuracy of sample set is 83.3%, and the reasoning time is in the reasonable interval when the branch number is limited. The proposed model can effectively assist traditional information leakage detection to improve its accuracy.

Key words: Android implicit information flow, control structure, Strict Control Dependence (SCD), ontology, Semantic Web Rule Language (SWRL)

中图分类号:

TP309.1

刘其源, 焦健, 曹宏盛. Android隐式信息流检测的本体模型[J]. 计算机应用, 2018, 38(1): 61-66.

LIU Qiyuan, JIAO Jian, CAO Hongsheng. Ontology model for detecting Android implicit information flow[J]. Journal of Computer Applications, 2018, 38(1): 61-66.

参考文献

[1] ARZT S, RASTHOFER S, FRITZ C, et al. FlowDroid:precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for Android apps[J]. ACM SIGPLAN Notices, 2014, 49(6):259-269.
[2] GORDON M I, KIM D, PERKINS J, et al. Information-flow analysis of Android applications in DroidSafe[C]//Proceedings of the 22nd Network and Distributed System Security Symposium. San Diego, CA:ISOC, 2015:1-16.
[3] ENCK W, GILBERT P, HAN S, et al. TaintDroid:an information-flow tracking system for realtime privacy monitoring on smartphones[J]. ACM Transactions on Computer Systems, 2014, 32(2):5-19.
[4] SCHWARTZ E J, AVGERINOS T, BRUMLEY D. All you ever wanted to know about dynamic taint analysis and forward symbolic execution (but might have been afraid to ask)[C]//Proceedings of the 2010 IEEE symposium on Security and Privacy. Piscataway, NJ:IEEE, 2010:317-331.
[5] YOU W, LIANG B, LI J, et al. Android implicit information flow demystified[C]//Proceedings of the 10th ACM Symposium on Information, Computer and Communications Security. Now York:ACM, 2015:585-590.
[6] 过辰楷,许静,司冠南,等.面向移动应用软件信息泄露的模型检测研究[J].计算机学报,2016,39(11):2324-2343.(GUO C K, XU J, SI G N, et al. Model checking for software information leakage in mobile application[J]. Chinese Journal of Computers, 2016, 39(11):2324-2343.)
[7] CLAUSE J, LI W, ORSO A. Dytan:a generic dynamic taint analysis framework[C]//Proceedings of the 2007 International Symposium on Software Testing and Analysis. New York:ACM, 2007:196-206.
[8] 杜小勇,李曼,王珊.本体学习研究综述[J].软件学报,2006,17(9):1837-1847.(DU X Y, LI M, WANG S. A survey on ontology learning research[J]. Journal of Software, 2006, 17(9):1837-1847.)
[9] 葛强,沈国华,黄志球,等.Web服务中支持本体推理的隐私保护研究[J].计算机科学与探索,2013,7(6):536-544.(GE Q, SHEN G H, HUANG Z Q, et al. Research on privacy protection based on ontology in Web service[J]. Journal of Frontiers of Computer Science and Technology, 2013, 7(6):536-544.)
[10] HORROCKS I, PATEL-SCHNEIDER P F, BOLEY H, et al. SWRL:a semantic Web rule language combining OWL and RuleML[R].[S.l.]:W3C Member Submission, 2004.
[11] BAO T, ZHENG Y, LIN Z, et al. Strict control dependence and its effect on dynamic information flow analyses[C]//Proceedings of the 19th International Symposium on Software Testing and Analysis. New York:ACM, 2010:13-24.
[12] KWON Y, KIM D, SUMNER W N, et al. LDX:Causality inference by lightweight dual execution[C]//Proceedings of the 2016 International Conference on Architectural Support for Programming Languages and Operating Systems. New York:ACM, 2016:503-515.
[13] 周亮,黄志球,倪川.基于SWRL规则的本体推理研究[J].计算机技术与发展,2015,25(10):67-70.(ZHOU L, HUANG Z Q, NI C. Research on ontology reasoning based on SWRL rules[J]. Computer Technology and Development, 2015, 25(10):67-70.)
[14] YADAV U, NARULA G S, DUHAN N, et al. Development and visualization of domain specific ontology using Protégé[J]. Indian Journal of Science and Technology, 2016, 9(16):1-7.
[15] MUSEN M A. The Protégé project:a look back and a look forward[J]. AI Matters, 2015, 1(4):4-12.
[16] BAK J, JEDRZEJEK C, FALKOWSKI M. Usage of the Jess engine, rules and ontology to query a relational database[C]//Proceedings of the 2009 International Workshop on Rules and Rule Markup Languages for the Semantic Web. Berlin:Springer, 2009:216-230.
[17] ZHOU Y, JIANG X. Dissecting android malware:characterization and evolution[C]//Proceedings of the 2012 IEEE Symposium on Security and Privacy. Piscataway, NJ:IEEE, 2012:95-109.
[18] RASTHOFER S, ARZT S, BODDEN E. A machine-learning approach for classifying and categorizing Android sources and sinks[C]//Proceedings of the 21nd Network and Distributed System Security Symposium. San Diego, CA:ISOC, 2014:1-15.

Android隐式信息流检测的本体模型

Ontology model for detecting Android implicit information flow

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

[1]	秦丽, 郝志刚, 李国亮. 国家食品安全标准图谱的构建及关联性分析[J]. 计算机应用, 2021, 41(4): 1005-1011.
[2]	代婷婷, 周乐, 余秦勇, 黄细凤, 谢军, 宋明慧, 刘峤. 基于需求评估响应的循环迭代本体构建方法[J]. 计算机应用, 2020, 40(9): 2712-2718.
[3]	刘景发, 顾瑶平, 刘文杰. 融合本体和改进禁忌搜索策略的气象灾害主题爬虫方法[J]. 计算机应用, 2020, 40(8): 2255-2261.
[4]	马冬雪, 宋设, 谢振平, 刘渊. 领域本体驱动的招投标网页解析方法[J]. 计算机应用, 2020, 40(6): 1574-1579.
[5]	侯艳辉, 董慧芳, 郝敏, 崔雪莲. 基于本体特征的影评细粒度情感分类[J]. 计算机应用, 2020, 40(4): 1074-1078.
[6]	赵一, 段兴, 谢仕义, 梁春林. 面向特定目标自识别的交通图像语义检索方法[J]. 计算机应用, 2020, 40(2): 553-560.
[7]	马建刚, 张鹏, 马应龙. 基于知识块摘要和词转移距离的高效司法文档分类[J]. 计算机应用, 2019, 39(5): 1293-1298.
[8]	唐晨, 李勇华, 饶梦妮, 胡钢俊. 动态需求跟踪中多义关键词的语义判断方法[J]. 计算机应用, 2019, 39(5): 1299-1304.
[9]	桑成, 程健, 史一明. 闭环全生命周期管理系统中知识集成与语义标注[J]. 计算机应用, 2017, 37(6): 1728-1734.
[10]	黄念娥, 黄河, 王儒敬. 本体与条件随机场结合的涉农商品名称抽取与类别标注[J]. 计算机应用, 2017, 37(1): 233-238.
[11]	钟艳如, 梁毅芳, 许本胜, 曾聪文, 卢宏成, 吴帆, 赵争君. 基于网络本体语言的三维计算机辅助设计主模型相似性计算方法[J]. 计算机应用, 2016, 36(6): 1599-1604.
[12]	张宇臣, 沈备军. 软件工程关联数据的自动构建[J]. 计算机应用, 2016, 36(3): 758-764.
[13]	刘馨蕊, 任凤玉, 雷国平. 领域本体驱动下企业联机分析处理系统应用研究[J]. 计算机应用, 2016, 36(1): 254-259.
[14]	陈千, 桂志国, 郭鑫, 向阳. 基于特征本体的文本流主题演化[J]. 计算机应用, 2015, 35(2): 456-460.
[15]	夏美翠, 时鸿涛. 基于语义网的高效信息查询方法[J]. 计算机应用, 2015, 35(10): 2915-2919.