CN103279334A - Android software rapid dynamic detection device and method - Google Patents
Android software rapid dynamic detection device and method Download PDFInfo
- Publication number
- CN103279334A CN103279334A CN2012105832575A CN201210583257A CN103279334A CN 103279334 A CN103279334 A CN 103279334A CN 2012105832575 A CN2012105832575 A CN 2012105832575A CN 201210583257 A CN201210583257 A CN 201210583257A CN 103279334 A CN103279334 A CN 103279334A
- Authority
- CN
- China
- Prior art keywords
- android
- android system
- software
- system image
- simulator
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Abstract
The invention discloses an android software rapid dynamic detection device and method. The detection device comprises an android system image repository, an identification unit, a matching unit and a loading unit, wherein the android system image repository is used for storing android system image files with different configurations, the identification unit is used for reading configuration files of android software to obtain the android system information needed by software operation, the matching unit is used for matching android system image files inside the android system image repository according to the android system information needed by software operation, and the loading unit is used for loading the successfully matched android system image files into a simulator through a snapshot loading method. The android software rapid dynamic detection device and method can configure files according to MANIFEST.MF of the software, selects a system with different authorities, displays all the functions of the software, adopts the snapshot loading method, largely shortens the time for starting the simulator, and achieves rapid multi-scene switchover.
Description
Technical field
The present invention relates to the mobile technology field, relate in particular to the quick device for dynamically detecting of a kind of android software and method.
Background technology
Along with increasing income of google Android operating system, recent years, the Android mobile phone development was very swift and violent, and the quantity of incident Android application software also increases severely.The security of these application software becomes the problem that vast mobile Internet user relatively is concerned about.With respect to the fast development of mobile Internet industry, the development of corresponding safety detection means but is in the process that relatively lags behind.
Deriving and come to do at mobile software the method for detection of dynamic from traditional pc machine, generally is software to be placed on move in the real system environment, catches the behavior in the running software, thereby draws analysis result.Because the mobile phone hardware resource is very limited, be difficult to accomplish that extensive robotization detects.Be accompanied by the development of Android mobile phone simulator, the test technique automatic of Android software is greatly improved.Owing to when simulator starts, need to load the various library files of Android operating system, on average start an Android simulator and need wait for 2 to 3 minutes.In addition, the operation of Android file has dependence to the version of operating system, some specific software also has dependence to other softwares, so use the simulator of different editions Android operating system that the Android file is detected, be unusual time-consuming procedure, be unfavorable for the rapid automatized detection of extensive sample.
The characteristic that native system utilizes new edition Android simulator to start the operating system from snapshot, invented and a kind ofly can carry out quick detection of dynamic to file fast, can obtain this sample file fast at the testing result of different platform by starting different scene image files, reaching simultaneously.
Summary of the invention
At above-mentioned technical matters, the present invention mainly provides a kind of android software quick device for dynamically detecting, android software installation kit can be rendered to and detect in this device and dispose.Described device comprises:
Android system image storehouse is used for preserving the android system image file of different configurations;
Recognition unit, the configuration file for reading android software obtains the needed android system information of described running software;
Matching unit is used for the android system image file according to the needed android system information matches of described running software android system image storehouse;
Loading unit is used for adopting the snapshot load mode general android system image file load that the match is successful to simulator.
Adopt conventional device for dynamically detecting to carry out pattern detection then, after detection is finished, the test results report that output is relevant.Retracting device can be done the coherent detection report and gather and present as a result.
Corresponding the present invention also provides a kind of android software quick dynamic testing method, be applicable to described device, described device at first detects the file layout of android software installation kit, and obtains Android operating system version and permissions list according to the configuration instruction of file.According to the information that gets access to, in the mirror configuration storehouse, obtain the image file that matches, adopt the snapshot load operation system mode of simulator, from snapshot, recover the Android system of a certain scene.Same, adopt conventional device for dynamically detecting to carry out pattern detection then, after detection is finished, the test results report that output is relevant.
The invention has the beneficial effects as follows:
The solution of the present invention uses android system image storehouse to preserve the android system image file of different configurations, these different image files can satisfy the demand of different android software, can from the operating system of different versions, move, further can be according to the MANIFEST.MF configuration file of software, choose the system that different rights is arranged, every function of described software can both be represented, to the Virus Sample dry run time, can more detect and record the various features of sample; Owing to adopted the snapshot load mode, the time that starts simulator shortens greatly in addition, has realized that many scenes are switched fast.
Description of drawings
In order to be illustrated more clearly in the present invention or technical scheme of the prior art, to do to introduce simply to the accompanying drawing of required use in embodiment or the description of the Prior Art below, apparently, the accompanying drawing that describes below only is some embodiment that put down in writing among the present invention, for those of ordinary skills, under the prerequisite of not paying creative work, can also obtain other accompanying drawing according to these accompanying drawings.
Fig. 1 is the quick device for dynamically detecting structural representation of android software of the present invention;
Fig. 2 is the quick device for dynamically detecting application scenarios of android software of the present invention figure;
Fig. 3 is the quick dynamic testing method process flow diagram of android software of the present invention;
Fig. 4 is the quick dynamic testing method Application Example of android software of the present invention process flow diagram.
Embodiment
In order to make those skilled in the art person understand technical scheme in the embodiment of the invention better, and above-mentioned purpose of the present invention, feature and advantage can be become apparent more, below in conjunction with accompanying drawing technical scheme among the present invention is described in further detail.
As shown in Figure 1, apparatus structure synoptic diagram of the present invention comprises:
Android system image storehouse 100 is used for preserving the android system image file of different configurations;
Matching unit 102 is used for the android system image file according to the needed android system information matches of described running software android system image storehouse;
Loading unit 103 is used for adopting the snapshot load mode general android system image file load that the match is successful to simulator.
Fig. 2 is the application scenarios figure of apparatus of the present invention:
File is rendered in this device, and this device at first detects file layout, and obtains Android operating system version and permissions list according to the configuration instruction of file.According to the information that gets access to, in mirror site, obtain the image file that matches, adopt the snapshot load operation system mode of simulator, from snapshot, recover the Android system of a certain scene.Adopt conventional device for dynamically detecting to carry out pattern detection then, after detection is finished, the test results report that output is relevant.Retracting device can be done the coherent detection report and gather and present as a result, and the testing result under the different scenes is gathered, and adopting is correlated with presents means, and analysis report simply clearly is provided.
Fig. 3 is the inventive method process flow diagram, comprising:
S101, read the configuration file of android software, obtain the needed android system information of described running software;
S102, according to the android system image file in the needed android system information matches of the described running software android system image storehouse;
S103, the employing snapshot load mode general android system image file load that the match is successful are in simulator;
S104, load the described software of operation in the system of the android system image file finish at simulator, and record detection information, this step mainly realizes the detection of dynamic of apk.
As shown in Figure 4, the Application Example process flow diagram for the inventive method comprises:
S201, file is rendered in the quick device for dynamically detecting of android software shown in Figure 2;
Whether S202, judge whether the file into apk, be android system installation file namely; If otherwise forward S207 to, otherwise continue to carry out;
S203, obtain Android operating system version and permissions list according to the configuration instruction of file;
The information that S204, basis get access to is obtained the image file that matches in the mirror configuration storehouse;
The snapshot load operation system mode of S205, employing simulator, the Android system of a certain scene of recovery from snapshot;
S206, the conventional device for dynamically detecting of employing carry out pattern detection, and described device for dynamically detecting is mainly used in realizing that the task that file is detected is distributed, program is installed and behavior monitoring, and provided corresponding test results report.Use existing any method to get final product.
S207, the test results report that output is relevant gather the testing result under the different scenes, and adopting is correlated with presents means, and analysis report simply clearly is provided.
Continue to judge the apk file then, switch the simulation system scene according to the file of throwing in.
The embodiment of method adopts the mode of going forward one by one to describe in this instructions, and for system embodiment, because it is substantially similar in appearance to method embodiment, so description is fairly simple, relevant part gets final product referring to the part explanation of method embodiment.
Though described the present invention by embodiment, those of ordinary skills know, the present invention has many distortion and variation and do not break away from spirit of the present invention, wish that appended claim comprises these distortion and variation and do not break away from spirit of the present invention.
Claims (6)
1. the quick device for dynamically detecting of android software is characterized in that, comprising:
Android system image storehouse is used for preserving the android system image file of different configurations;
Recognition unit, the configuration file for reading android software obtains the needed android system information of described running software;
Matching unit is used for the android system image file according to the needed android system information matches of described running software android system image storehouse;
Loading unit is used for adopting the snapshot load mode general android system image file load that the match is successful to simulator.
2. device as claimed in claim 1 is characterized in that, also comprises:
Detecting unit is used for loading at simulator the described software of system's operation of the android system image file of finishing, and records detection information.
3. device as claimed in claim 1 is characterized in that, the described needed android system information of described running software of obtaining comprises: android operating system version information and permissions list.
4. the quick dynamic testing method of android software is characterized in that, is applicable to the described system of claim 1, and described method comprises:
Read the configuration file of android software, obtain the needed android system information of described running software;
According to the android system image file in the needed android system information matches of the described running software android system image storehouse;
Adopt the snapshot load mode general android system image file load that the match is successful in simulator.
5. method as claimed in claim 5 is characterized in that, also comprises: the described software of operation in the system of the android system image file that the simulator loading is finished, and record detection information.
6. method as claimed in claim 5 is characterized in that, the described needed android system information of described running software of obtaining comprises: android operating system version information and permissions list.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2012105832575A CN103279334A (en) | 2012-12-28 | 2012-12-28 | Android software rapid dynamic detection device and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2012105832575A CN103279334A (en) | 2012-12-28 | 2012-12-28 | Android software rapid dynamic detection device and method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN103279334A true CN103279334A (en) | 2013-09-04 |
Family
ID=49061877
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2012105832575A Pending CN103279334A (en) | 2012-12-28 | 2012-12-28 | Android software rapid dynamic detection device and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103279334A (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103677956A (en) * | 2013-12-06 | 2014-03-26 | 北京奇虎科技有限公司 | Method and device for simulating application operation of mobile equipment on calculating equipment |
| CN105700936A (en) * | 2016-01-14 | 2016-06-22 | 福州靠谱网络有限公司 | Operating method and apparatus for application program of Android simulator |
| CN106201567A (en) * | 2015-05-08 | 2016-12-07 | 小米科技有限责任公司 | Obtain the method and device of application message |
| CN106708598A (en) * | 2016-07-29 | 2017-05-24 | 腾讯科技（深圳）有限公司 | Setup method and device for virus analysis environment |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101986266A (en) * | 2010-10-22 | 2011-03-16 | 浙江大学 | Method for transplanting Android mobile phone operating system to Atom development board |
| CN102023863A (en) * | 2010-12-13 | 2011-04-20 | 中兴通讯股份有限公司 | Method and device for switching editions |
| CN102214118A (en) * | 2010-04-08 | 2011-10-12 | 中国移动通信集团公司 | Method, system and device for controlling virtual machine (VM) |
| US20120089825A1 (en) * | 2010-10-07 | 2012-04-12 | Jung Myung-June | Apparatus and method for generating a boot image that is adjustable in size |
| CN102591696A (en) * | 2011-01-14 | 2012-07-18 | 中国科学院软件研究所 | Method and system for extracting behavioral data of mobile phone software |
-
2012
- 2012-12-28 CN CN2012105832575A patent/CN103279334A/en active Pending
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102214118A (en) * | 2010-04-08 | 2011-10-12 | 中国移动通信集团公司 | Method, system and device for controlling virtual machine (VM) |
| US20120089825A1 (en) * | 2010-10-07 | 2012-04-12 | Jung Myung-June | Apparatus and method for generating a boot image that is adjustable in size |
| CN101986266A (en) * | 2010-10-22 | 2011-03-16 | 浙江大学 | Method for transplanting Android mobile phone operating system to Atom development board |
| CN102023863A (en) * | 2010-12-13 | 2011-04-20 | 中兴通讯股份有限公司 | Method and device for switching editions |
| CN102591696A (en) * | 2011-01-14 | 2012-07-18 | 中国科学院软件研究所 | Method and system for extracting behavioral data of mobile phone software |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103677956A (en) * | 2013-12-06 | 2014-03-26 | 北京奇虎科技有限公司 | Method and device for simulating application operation of mobile equipment on calculating equipment |
| CN103677956B (en) * | 2013-12-06 | 2017-05-31 | 北京奇虎科技有限公司 | A kind of method and apparatus of the application operation of simulation mobile device on the computing device |
| CN106201567A (en) * | 2015-05-08 | 2016-12-07 | 小米科技有限责任公司 | Obtain the method and device of application message |
| CN105700936A (en) * | 2016-01-14 | 2016-06-22 | 福州靠谱网络有限公司 | Operating method and apparatus for application program of Android simulator |
| CN106708598A (en) * | 2016-07-29 | 2017-05-24 | 腾讯科技（深圳）有限公司 | Setup method and device for virus analysis environment |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| KR101554633B1 (en) | Apparatus and method for detecting malicious code | |
| CN102663288B (en) | Virus killing method and device thereof | |
| US10121004B2 (en) | Apparatus and method for monitoring virtual machine based on hypervisor | |
| CN108763951B (en) | Data protection method and device | |
| CN108241550B (en) | Backup and restoration method for operating system | |
| KR20170068814A (en) | Apparatus and Method for Recognizing Vicious Mobile App | |
| CN103294951B (en) | A kind of malicious code sample extracting method based on document type bug and system | |
| CN106648685B (en) | Intelligent terminal system application processing method and device and intelligent terminal | |
| KR101816751B1 (en) | Apparatus and method for monitoring virtual machine based on hypervisor | |
| CN103279334A (en) | Android software rapid dynamic detection device and method | |
| CN103886229A (en) | Method and device for extracting PE file features | |
| CN103631573A (en) | Method and system for obtaining execution time of transferable functions | |
| CN104268473A (en) | Method and device for detecting application programs | |
| CN105893127A (en) | Method for starting application and terminal device | |
| CN104750612A (en) | File operation testing method and device | |
| CN106484719B (en) | Method and terminal for expanding mobile phone storage | |
| CN105512562A (en) | Vulnerability mining method and device and electronic equipment | |
| CN107798244A (en) | A kind of method and device for detecting Remote Code Execution Vulnerability | |
| CN107168875B (en) | Activity component leakage detection method based on android application multi-entry characteristics | |
| CN105426304A (en) | Control method and device of restart test | |
| KR101530530B1 (en) | Apparatus and Method for Detecting Malicious Process Execution in a Mobile Terminal | |
| EP3639138A1 (en) | Action undo service based on cloud platform | |
| CN103914377A (en) | Interface testing method and device | |
| US20160196423A1 (en) | Smart device and method for dynamically detecting applications | |
| KR101563897B1 (en) | Apparatus and method for obtaining data assuring data integrity of user's data in a device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C02 | Deemed withdrawal of patent application after publication (patent law 2001) | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20130904 |