Integrity Measurement Method for Android Framework
CSTR:
Author:
Affiliation:

Clc Number:

Fund Project:

  • Article
  • |
  • Figures
  • |
  • Metrics
  • |
  • Reference
  • |
  • Related
  • |
  • Cited by
  • |
  • Materials
  • |
  • Comments
    Abstract:

    Android system has been one of main targets of hacking. Since its realease, it has been facing security risks such as root, image tampering, and malicious programs. System security usually overlooks framework layer which may cause high security risks. This study analyzes the component in Android framework and how it works. We present an Integrity Measurement Method for Android Framework (FIMM) to ensure Android framework's code integrity and runtime integrity. We focus on the issue of lack of protection for Android framework. The method is able to measure the integrity of component of Android framework and verity it. We consider that Android system service has a long running period, then we analysis the calling process for Android system services and present a dynamic integrity measurement for process providing fine-grained measurement. It measures and verities system service process every time system service is called. Finally, the FIMM impelemention based on Android emulator is discussed and presented. We believe that FIMM achieves the security goals, nevertheless, it causes a little performance loss as well.

    Reference
    Related
    Cited by
Get Citation

周星锦,秦宇,吴秋新,习伟,赵世军. Android框架层完整性度量方案.计算机系统应用,2019,28(8):1-9

Copy
Share
Article Metrics
  • Abstract:
  • PDF:
  • HTML:
  • Cited by:
History
  • Received:January 28,2019
  • Revised:February 26,2019
  • Adopted:
  • Online: August 14,2019
  • Published: August 15,2019
Article QR Code
You are the firstVisitors
Copyright: Institute of Software, Chinese Academy of Sciences Beijing ICP No. 05046678-3
Address:4# South Fourth Street, Zhongguancun,Haidian, Beijing,Postal Code:100190
Phone:010-62661041 Fax: Email:csa (a) iscas.ac.cn
Technical Support:Beijing Qinyun Technology Development Co., Ltd.

Beijing Public Network Security No. 11040202500063