Android Apps： Static Analysis Based on Permission Classification.docVIP

Android Apps： Static Analysis Based on Permission Classification Abstract Android has a strict permission management mechanism. Any applications that try to run on the Android system need to obtain permission. In this paper， we propose an efficient method of detecting malicious applications in the Android system. First， hundreds of permissions are classified into different groups. The application programming interfaces （APIs） associated with permissions that can interact with the outside environment are called sink functions. The APIs associated with other permissions are called taint functions. e construct association tables for block variables and function variables of each application. Malicious applications can then be detected by using the static taint-propagation method to analyze these tables. Keywords malware； software analysis； static analysis； Android 1 Introduction Smartphones have become more complex in terms of functions and third-party applications， and this makes them a living space for malware. People store private information such as accounts and passwords on their smartphones， the loss of which could have serious consequences. Malware that runs on smartphones has the same characteristics as malware that runs on desktops. Thus， traditional malware analysis methods for desktops can also be used for Android. Software analysis techniques develop very fast； static-analysis methods are particularly efficient and easy to use because an application can be analyzed without having to be run [1]. General static-analysis methods include data-flow analysis， control-flow analysis， and type analysis. Symbolic execution is another commonly used static-analysis method [2]， [3]. It is used for intelligent path scheduling and constraint resolution. Android uses a strict permission management mechanism to restrict the behavior of applications. If a program needs to write files to the storage card， the WRITE_EXTERNAL_STORAGE permission must be granted to the program. I