Security Quantitative Assessment Of Mobile Intelligent Terminals

The rapid development of the mobile Internet has driven people's expectations for mobile intelligent terminals to acquire information and provide services.The shipments and users of mobile smart terminals have reached new heights.Mobile smart terminals represented by smart phones,tablets and wearable devices have completely changed people's lives.With the expansion of the market size of mobile intelligent terminals,the personal privacy information of users carried on them has become the target of criminals.Because of its open source features,Android has promoted the intelligence of mobile phones,and is therefore more vulnerable to attacks by viruses and malicious code.Therefore,it is of great significance and necessity to carry out quantitative evaluation of security performance for mobile intelligent terminals,especially mobile intelligent terminals of Android system.In order to realize the security quantitative evaluation for mobile intelligent terminals,this paper deeply understands the security protection mechanism of Android system,analyzes the Android vulnerability and high security issues,and designs and completes the security test platform by using Android smartphone as the experimental object.Automated evaluation is achieved.In addition,this paper also proposes two evaluation methods based on the test results of the security test cases in the test platform,and makes a comprehensive evaluation of the security performance of all aspects of the smartphone.The main work of this paper is as follows:(1)A security quantitative evaluation scheme based on graph and potential function is proposed.The mobile security terminal security threat map is established,and the potential function is introduced to calculate the risk of the security threat and the vulnerability node in the graph,and the effective information such as the key nodes and node potential values in the graph are analyzed,so as to analyze and evaluate the security threat.(2)A classification scheme of mobile intelligent terminal security level based on BP neural network is proposed.The neural network is trained by the accumulated data set,and the terminal data to be evaluated is input into the trained network to obtain the comprehensive evaluation result.(3)Combined with the current safety standards and test methods for mobile intelligent terminals at home and abroad,the safety test platform was designed and implemented to complete the automatic evaluation.(4)The system file access control and Root security test cases are designed and implemented,and the security performance evaluation of the mobile intelligent terminal operating system is completed.(5)The location security and browser security test cases are designed and implemented,and the storage security performance evaluation of the mobile intelligent terminal is completed.(6)The security of the call record and the security test of the mobile phone address book were designed and implemented,and the privacy and security performance evaluation of the mobile intelligent terminal was completed.(7)The application permission security and malicious plug-in scanning test cases are designed and implemented,and the security performance evaluation of the mobile intelligent terminal application is completed.