X-Decaf：Android平台社交类应用的缓存文件泄露检测.pdfVIP

第39 卷第1 期 电 子 与 信 息 学 报 Vol.39No.1 2017 年1 月 Journal of Electronics Information Technology Jan. 2017 X-Decaf : Android 平台社交类应用的缓存文件泄露检测 李 晖 王 斌* 张 文 汤 祺 张艳丽 (北京邮电大学计算机学院 北京 100876) 摘 要：由于社交类应用涉及的隐私数据类型非常多，导致这类应用在被广泛使用的同时，频繁出现用户隐私泄露 事件，但是目前还鲜有针对社交应用的隐私泄露检测机制的研究。该文结合 Android 系统的特性，提出一个面向 Android 社交类应用检测框架 X-Decaf(Xposed-based-detecting-cache-file) ，创新性地利用污点追踪技术以及 Xposed 框架，获取应用内疑似泄露路径，监测隐私数据的缓存文件。此外，该文给出了对隐私泄露进行评级的建 议，并利用该框架对50 款社交类应用进行了检测，发现社交类应用普遍存在泄露用户隐私信息的漏洞。 关键词：隐私泄露；污点追踪；缓存文件；Xposed；Android 系统 中图分类号：TP309 文献标识码：A 文章编号：1009-5896(2017)01-0066-09 DOI: 10.11999/JEIT160555 X-Decaf : Detection of Cache File Leaks in Android Social Apps LI Hui WANG Bin ZHANG Wen TANG Qi ZHANG Yanli (School of Computer Science, Beijing University of Posts and Telecommunications, Beijing 100876, China) Abstract: Since social applications involve various types of information related to the user privacy, events of privacy leakage occur frequently along with their popular applications and few studies are available on the privacy leakage detection for social applications. With the combination of the characteristics of the Android system as well as the exploitation of the taint tracking technology and Xposed framework, a privacy leakage detection tool named X-Decaf (Xposed-based-detecting-cache-file) is proposed, which is oriented to social applications on Android platform. It suspects the leakage paths within the applications and detects the privacy data’s cache files. This paper also presents a suggestion for the evaluation of the privacy leakage. Evaluation results of 50 kinds of Android social applications