The Research And Practice Of Application Static Analysis Technology On Mobile Intelligent Terminal

With the rapid development of mobile Internet,mobile applications have penetrated into most industry and play a more and more important role on people’s lives,at the same time security probl ems of mobile application follows.Android gains the most of market share of all the mobile terminal,and due to the development of the Android system issues,malicious software problems on the Android platform is more serious than other platforms.Faced with the increasingly sophisticated malicious software,how to analyze mobile applications effectively become the focus of today’s study.Currently analysis for mobile application software is not uncommon,but most of them are staying at the source code,due to Android system,decompiled to the source code accompanies a lot of information lost which is the reason of the difficulty of building intermediate model and an incomplete result.Intermediate language smali compare to the source code can retain the information in the application completely and then accomplish without deviation and spend less time.Through in-depth research of mobile software file structure、executable files and smali language syntax tree structure,then through the analysis of mobile applications static analysis processes,ultimately design and comply a mobile applications static detection system based on the intermediate language smali.This system mainly includes pre-processing module,and based on the intermediate language smali behavioral analysis module,these modules completes determine quickly whether there are sensitive behavior in the mobile application and detailed behavioral analysis for sensitive behavior which may exist in the mobile application software.The major work of this paper can be mainly reflected as follows:Firstly,through the in-depth research and analysis software for mobile applications and executable files themselves,we put forworda fast and accurate pretreated method,which can quickly and accurately determine whether there are sensitive behaviors existing in mobile applications software.Secondly through the analysis of intermediate language smali grammar,we put forword a static sensitive behavior detection method based on the the intermediate language smali.Then a model which based on intermediate language smali is established and infor mation in control flow and data flow can be extracted,then sensitive behavior in mobile applications can be detected.And results show that this method compare to the static detection method based on the source code,efficiency has significantly efficiency increased and accuracy has a small margin improvement.