SeSoa： Security Enhancement System with Online Authentication for Android APK.docVIP

SeSoa： Security Enhancement System with Online Authentication for Android APK 　　Abstract Android OS provides such security mechanisms as application signature， privilege limit and sandbox to protect the security of operational system. However， these methods are unable to protect the applications of Android against anti?reverse engineering and the codes of such applications face the risk of being obtained or modified， which are always the first step for further attacks. In this paper， a security enhancement system with online authentication （SeSoa） for Android APK is proposed， in which the code of Android application package （APK） can be automatically encrypted. The encrypted code is loaded and run in the Android system after being successfully decrypted. Compared with the exiting software protecting systems， SeSoa uses online authentication mechanism to ensure the improvementof the APK security and good balance between security and usability. 　　Keywords software protection； anti?reverse； Android； authentication 　　1 Introduction 　　Because of its true openness， Android [1] has become one of the most popular mobile platforms in the world since its appearance in the market a few years ago. Naturally， the number of available applications is increasing rapidly and now over 1，800，000 Android applications can be chosen by the Android users according to the statistical result of Google Play [2]. However， the open source code of Android and a huge number of applications pose a vital security challenge for the Android system. More and more attackers aim to its flaws， not only the flaws of the OS itself， but also the flaws of the applications， which are hard for the developers of Android system to fix. 　　Among many security threats of Android system， the Android applications’ source codes face the risk of being decompiled and may be acquired by illegal organizations through reverse engineering techniques. This threat may result in that the program is slightly modified，