Abstract:

Android applications can use many mechanisms provided by Android system.But the improper use of these mechanisms may make catastrophe to user’s security and benefits. The paper proposes a program analysis method,which detects malicious behaviors in the mechanism. According to the characteristics of function, the corresponding function summary is constructed.The instruction level simulation is used to construct function summary,while the function level simulation is used to detect malicious behaviors. Based on the method above,a prototype system is designed and implemented.We use the system to detect a public malicious application sample library,and the results show that our method is effective.

Key words: Android;system mechanism;malicious behavior;function summary