| In the current society,as an important tool for people to work,shop,entertain,and make friends,mobile phones store a large amount of personal privacy information and important confidential data.More and more hackers are focusing on the security flaws of the Android permission mechanism.The number of malicious applications on mobile phones has increased,and the threats caused by them have become more and more serious.To solve the above problems,the main research content is as follows.First of all,for the malicious behavior analysis of Android,it clearly introduces the current development status of the Android market,describes the research status of domestic and foreign Android APP privacy data leakage analysis and detection,and summarizes the advantages and disadvantages of existing malicious detection methods.According to the insufficient content of existing user-oriented research,using static analysis technology,a user-oriented privacy leak detection model is proposed,and the relevant technology and theoretical knowledge used in the research process are described.Secondly,it describes in detail the user-oriented Android privacy leak detection model based on taint propagation analysis,optimizes the function call graph algorithm,and defines the page positioning algorithm.Through the model’s privacy leak detection of the application,the function call graph and page can be obtained.The call relationship graph is used to accurately analyze the critical path marked by the data during the spread of the program page,and the method to determine the page to be prompted is given.The static taint analysis technology is used to detect the data leakage behavior of the Android application and give the final result.The detection results are notified to users through page prompts,which solves the problem of transparency of privacy leakage to users.Thirdly,the user-oriented implementation scheme of the Android privacy data leakage detection model based on taint propagation analysis is given.Based on the taint analysis technology,the application is analyzed at the detection layer of the model to detect whether the program has data leakage and the leakage path.Use the optimized page call relationship graph generation algorithm and page positioning algorithm to determine the page to be modified.And by modifying the code of the Activity class of the corresponding page,the function of prompting the user’s privacy leakage is realized.Finally,based on the application detection model and static taint analysis technology,on the basis of the Shengle ticket inspection application,the various module functions of the model are detected,and the propagation path of the taint in the instance is analyzed,and the privacy leak detection function is verified.Correctness and effectiveness,and applied the page positioning algorithm to accurately locate the page that leaked user information,and realized the user-oriented page prompt function. |