KR20150123543A - Device and method of analyzing information drain of application - Google Patents

Abstract

The present invention relates to a device and method for analyzing information leakage of an application of a user. To this end, the device of the present invention comprises: a database server for collecting package information about an application from an app market, receiving a request for information leakage analysis of the application from a user, and responding to the user with information leakage information of the application; and an analyzing server for receiving a request for analysis about information leakage of the application from a database server, analyzing a code of the application, and providing information leakage information of the application to the database server. The information leakage information requested by the user includes information about information leakage of the application, and information about an information where the information leakage is occurred. According to the present invention, reliability about the analyzed result can be improved and stability for a used application can be provided to the user by offering the analyzed result about not only information leakage of an application used by a user but also an information where the information leakage is occurred.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to an apparatus and method for analyzing information leakage of an application,

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information leakage analysis apparatus and method for an application, and more particularly, to an information leakage analysis apparatus and method for an application that can provide an analysis result on an information leakage, .

Recently, smart devices, such as smart phones, smart TVs, tablet PCs, and wearable devices (WEARABLE DEVICE), etc., have been expanding in variety and use range. One of the characteristics of these smart devices is that applications that are executed to improve convenience, entertainment, and functions in the devices are distributed through an open market, and the distribution market is rapidly growing. The Open Market makes it easy to distribute various applications developed by application developers, and users can easily purchase and install applications through Open Market.

This has resulted in an increase in application developers, growth in the open market, ease of access and simplicity of installation. For example, it is impossible to inspect every case with a device that verifies or restricts the application's behavior in the open market. Therefore, an application installed in a user's smart device can perform an operation irrelevant to the original function without the user's consent, thereby directly or indirectly damaging the user.

There is a need to examine the behavior of the application to verify, analyze and resolve unwanted behavior.

In particular, one of the problems caused by the abnormal operation of the application of the smart device in recent years is information leakage. For example, information resources of a smart device including personal information such as a phone number, an address book, a location, and a photograph may leak out unlike a user's intention or not recognized by a user.

Therefore, although researches on analyzing devices and methods for leakage of information of users' applications are steadily performed, prior documents only provide information about leakage of information in a database that determines whether information is leaked or stores personal information .

In particular, Korean Patent Registration No. 1200907 discloses a personal information leakage prevention system for detecting leakage of personal information stored in a database by analyzing a response value and an abnormal symptom of a database to a query word, and a prevention method using the system. There is a problem in that it is not possible to provide an analysis method for information leakage and information leakage for the application used in the application.

Korean Patent Registration No. 1039698 discloses a database security system, a server, and a method for protecting a database access via an application. The database security system monitors a result value of a query word and a query word that indirectly access the database through an application, There is a problem that the focus is focused only on the information leakage of the database by storing, alerting and blocking the log against the security contents.

The present invention solves the above problems. It is an object of the present invention to provide an analysis result of an information leak point as well as information leaks to an application used by a user, thereby improving the reliability of the analysis result, Which is capable of providing an information leak analysis apparatus of an application capable of providing an information leak analysis apparatus.

Another object of the present invention is to provide a method for analyzing an information leak of an application using the above analyzing apparatus.

In order to accomplish the above object, an information leak analysis apparatus for an application according to embodiments of the present invention includes a database server and an analysis server as an apparatus for analyzing information leakage of a user application. The database server collects package information about the application from the application market, receives the information flow analysis request of the application from the user, and responds to the information leakage information of the application to the user. The analysis server receives an analysis request for information leakage of the application from the database server, analyzes the code of the application, and provides the information leakage information of the application to the database server.

In the embodiments of the present invention, the information leakage information of the application includes information on whether or not the application has leaked information and information leakage information.

In the embodiments of the present invention, the database server may include an application package collection unit for collecting package information of the application or the application from the app market; A package DB for storing application or application package information collected by the application package collecting unit and delivering the package information of the application when the analysis server requests the analysis server to analyze the information leakage; An analysis result DB for storing an analysis result of information leakage of the application received from the analysis server; And receiving information leakage request of the application from the user, responding information leakage information of the application to the user, instructing the application package collection unit to collect package information for the application, And an interface unit for requesting analysis of the information leakage of the application.

In embodiments of the present invention, the interface unit may receive the package name, version information, hash information of the application, or receive the application package from the user.

At this time, the interface unit determines through the analysis result DB whether or not there is a result of analyzing the information leakage information of the application for which information leakage is requested from the user. As a result of the determination, if there is a pre-analyzed result, the analysis result stored in the DB is responded to the user. As a result of the determination, if the analyzed result does not exist, an analysis request is sent to the analysis server.

In the embodiments of the present invention, the analysis server receives an analysis request of the application from the database server, and determines a trace that determines the target of the analysis-requested application based on a list stored in advance or an access right given to the application An object determining unit; A code extracting unit for extracting a code of an application requested to be analyzed by separating a code from a package of the application to be traced; A module-specific flow specification generation unit for generating a data flow graph and an information flow graph of the extracted code and generating a flow specification for each module of the extracted code; An overall flow specification generation unit for collecting the generated flow specification of each module to generate a flow specification of the entire code; A flow specification analyzer for analyzing the generated overall flow specification; An information leakage extracting unit for extracting an information leakage point of the application through the analysis of the flow specification analyzing unit; And an information outflow result transmission unit for transmitting the information outflow information including the information outflow to the database server.

In the embodiments of the present invention, the module-specific flow specification generator generates a specification of an information flow between a source to which a tracking target information resource is input and a sink to which information is output, for each module of the code.

In the embodiments of the present invention, the overall flow specification generation unit collects the generated flow specification of each module and the library information flow specification to generate a flow specification of the entire code.

According to another aspect of the present invention, there is provided an information leakage analysis apparatus for an application, the information leakage analysis apparatus comprising: A tracking target determining unit that determines a tracking target of the requested application; A code extracting unit for extracting a code of an application requested to be analyzed by separating a code from a package of the application to be tracked; A module-specific flow specification generation unit for generating a data flow graph and an information flow graph of the extracted code and generating a flow specification for each module of the extracted code; An overall flow specification generation unit for collecting the generated flow specification of each module to generate a flow specification of the entire code; A flow specification analyzer for analyzing the generated overall flow specification; An information leakage extracting unit for extracting an information leakage point of the application through the analysis of the flow specification analyzing unit; And an information outflow result transmission unit for responding to the information outflow information including the information outflows to the user.

In the embodiments of the present invention, it is also possible to receive only the identification information of the application from the user, or receive the application package itself and analyze the information leakage of the application.

In order to achieve the above object, an information leakage analysis method of an application according to embodiments of the present invention comprises the following steps. First, the database server receives an information leakage analysis request of the application from the user, and determines whether there is already analyzed information leakage information for the requested application. If the information leakage information analyzed previously is present, the database server responds to the user with the pre-analyzed information leakage information, and if the pre-analyzed information leakage information does not exist as a result of the determination, Requests the analysis server to analyze the information leak of the requested application. Wherein the analysis server receives the information leakage analysis request of the application, determines an object to be traced of the application requested to be analyzed based on the list stored in advance or the access right given to the application, And extracts the code of the application requested to be analyzed. Then, the analysis server generates a data flow graph and an information flow graph of the extracted code to generate a flow specification for each module of the extracted code, then collects the generated flow specifications for each module, . The analysis server analyzes the generated overall flow specification and extracts the information outflow of the application through the analysis of the entire flow specification. The analysis server transmits information leakage information including the information leakage to the database server, and the database server responds to the information leakage information of the application to the user.

According to another aspect of the present invention, there is provided an information leakage analysis method for an application, the method comprising the steps of: The analysis server receives an information leakage analysis request of the application from the user and determines an object to be traced of the analysis requested application based on the list stored in advance or the access right given to the application. Then, the analysis server separates the code from the package of the application to be tracked, and extracts the code of the application requested to be analyzed. The analysis server generates a data flow graph and an information flow graph of the extracted code to generate a flow specification for each module of the extracted code and then collects the flow specifications for each module to generate a flow specification of the entire code do. The analysis server analyzes the generated overall flow specification and extracts an information outflow of the application through the analysis of the flow specification analysis unit. The analysis server responds to the user with information leakage information including the information leakage.

In the embodiments of the present invention, the step of generating the flow specification for each module may include generating a specification of an information flow between a source to which a tracking target information resource is input and a sink to which information is output for each module of the code . Also, the generating of the entire flow specification is characterized by collecting the generated flow specification of each module and the library information flow specification to generate a flow specification of the entire code.

In embodiments of the present invention, receipt of an application information flow analysis request from a user may be received from the user device before execution of the application or after execution.

According to the information leak analysis apparatus and method of the application as described above, the following effects are obtained.

First, reliability of information leakage outcome can be improved by providing not only information leakage of users' smart devices but also information leakage map analysis and results.

Second, if a user makes an analysis request before executing an application, the performance of the application can be prevented from deteriorating.

Third, it can store the previously analyzed information leakage information for a specific application, and can provide the analysis result quickly by providing the analyzed result in real time when there is the analyzed result at the user's request.

Fourthly, the user can directly analyze the leakage of information about the application installed in the user's smart device and receive the result, so that the severity of the information leakage and the damage can be grasped accurately and the response can be made efficient.

Fifth, in order to analyze the information leakage of the application, the flow specification of the module of the application package can be performed first, thereby improving the analysis time and efficiency.

1 is a block diagram for explaining an information leak analysis apparatus for an application according to an embodiment of the present invention;
2 is a block diagram for explaining an information leakage analysis apparatus of an application according to another embodiment of the present invention.
FIG. 3 is a view for specifically explaining the database server shown in FIG. 1 and FIG. 2; FIG.
FIG. 4 is a view for specifically explaining the analysis server shown in FIG. 1 and FIG. 2; FIG.
5 is a flow chart for explaining an information leak analysis method of an application according to embodiments of the present invention

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An apparatus and method for analyzing information leakage of an application according to embodiments of the present invention will be described in detail with reference to the accompanying drawings. The present invention is capable of various modifications and various forms, and specific embodiments are illustrated in the drawings and described in detail in the text. It is to be understood, however, that the invention is not intended to be limited to the particular forms disclosed, but on the contrary, is intended to cover all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. Like reference numerals are used for like elements in describing each drawing. In the accompanying drawings, the dimensions of the structures are enlarged to illustrate the present invention, and are actually shown in a smaller scale than the actual dimensions in order to understand the schematic configuration.

Also, the terms first and second, etc. may be used to describe various components, but the components should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the first component may be referred to as a second component, and similarly, the second component may also be referred to as a first component. On the other hand, unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in commonly used dictionaries are to be interpreted as having a meaning consistent with the contextual meaning of the related art and are to be interpreted as either ideal or overly formal in the sense of the present application Do not.

FIG. 1 is a block diagram for explaining an information leakage analysis apparatus for an application according to an embodiment of the present invention, and FIG. 2 is a diagram for explaining an information leakage analysis apparatus for an application according to another embodiment of the present invention .

Referring to FIG. 1, an information flow analysis analyzing apparatus 100 according to an embodiment of the present invention receives an inquiry about information leakage of an application installed in the user terminal 20 by downloading from an application market 10, It is a device for responding.

At this time, the information leakage analysis apparatus 100 of the present application provides information about information leakage and information leakage information of the application including the information leakage information.

In the embodiments of the present invention, the information leakage analysis apparatus 100 of the application holds the database server 200 and the analysis server 300, respectively, and receives an inquired analysis request from the user terminal 20, The results of the analysis can be provided.

On the other hand, an application (user application) for making an information leak query (request) may be additionally installed in the user terminal 20. [ The user terminal 20 can request the database server 200 to inquire about an application installed through the user application.

2, the application information leakage analysis apparatus according to another embodiment of the present invention includes a database server 200 and an analysis server 300 separately from each other, (Request) information about whether or not information is leaked to the user. At this time, if the database server 200 has already analyzed the information leakage result for the application, it immediately responds to the information leakage result to the user. If there is no analyzed information leakage result for the application, the database server 200 makes an analysis request to the analysis server 300, and the analysis server 300 analyzes the code of the application, To the database server (200). The database server 200 provides the analysis result received from the analysis server 300 to the user.

In this way, the application information leakage analysis apparatus 100 is composed of the entire system in which the database server 200 and the analysis server 300 are configured together, or is composed of only the analysis server 300 that analyzes the information leakage of the application, May be configured separately from the database server 200 that performs a query and a response with the user terminal 10 and the user terminal 20.

The database server 200 and the analysis server 300 will now be described in more detail.

FIG. 3 is a view for explaining the database server shown in FIG. 1 and FIG. 2 in detail, and FIG. 4 is a diagram for explaining the analysis server shown in FIG. 1 and FIG. 2 in detail.

3, the database server 200 according to the embodiment of the present invention includes an application package collecting unit 210, a package DB 220, an interface unit 230, and an analysis result DB 240.

The application package collecting unit 210 collects the package information of the application or the application from the application market 10.

The package DB 220 stores application or application package information collected by the application package collection unit 210. In addition, when the analysis server 300 requests analysis of the information leakage to the application, the package DB 220 delivers the package information of the application to the analysis server 300.

The interface unit 230 receives the information leakage request of the application from the user terminal 20. At this time, the interface unit 230 may receive the package name, version information, and hash information of the application from the user terminal 20 or receive the application package.

Meanwhile, the interface unit 230 determines through the analysis result DB 240 whether there is a result of analyzing the information leakage information of the application requested to be leaked from the user terminal 20. As a result of the determination, if there is a result of the pre-analysis, the interface 230 responds to the user of the analyzed result stored in the analysis result DB 240. As a result of the determination, if the analyzed result does not exist, the interface unit 230 requests the analysis server 300 to analyze the information leakage of the application.

In addition, the interface unit 230 may instruct the application package collection unit 210 to collect package information for the application. The package collecting unit 210 receives the application package information from the application market 10 and provides the application package information to the analysis server 300 through the package DB 220. When the analysis server 300 receives the application package information .

The interface 230 receives the analysis result from the analysis server 300 and responds to the information leakage information of the application to the user terminal 20.

As a result of analysis, the DB 240 stores the analysis result of the information leakage of the application received from the analysis server 300. [ In the embodiments of the present invention, since the analysis result DB 240 stores the analyzed analysis results, the interface unit 230 can provide a result of the user analysis.

4, an analysis server 300 according to an embodiment of the present invention includes a tracking object determiner 310, a code extractor 320, a module flow specification generator 330, A flow specification analyzing unit 350, an information outflow analysis unit 360, and an information outflow result transmission unit 370. [

The analysis server 300 receives only the identification information of the application from the user terminal 20 or the database server 200 or receives the application package itself and analyzes the information leakage of the application.

The tracking target determining unit 310 receives an analysis request of an application from the database server 200 and determines an object to be tracked from information accessed by the application requested to be analyzed based on a list stored in advance or an access right given to the application do. The tracking target determining unit 310 can use the predetermined list for the specific situation even when the predetermined list is used.

The code extracting unit 320 separates the code from the package of the application to be tracked and extracts the code of the application requested to be analyzed. At this time, the code includes byte code, XML code, JavaScript code, and native code, and is not limited to a particular type of code.

The module-specific flow specification generator 330 generates a data flow graph and an information flow graph of the extracted code, and generates a module-specific flow specification of the extracted code. The flow specification generator 330 for each module includes a data flow graph generator 332 and an information flow graph generator 334. The data flow graph generator 332 and the information flow graph generator 334, The data flow graph generation and the information flow graph generation can be generated in any order. The data flow graph is a graph showing how data in the code have dependency with each other, and the information flow graph is a graph showing the order in which each instruction of the code is executed.

For example, the module-specific flow specification generator 330 generates an information flow (information flow) between a source to which a tracking target information resource (telephone number, address book, location, And generates a module-specific flow specification of the extracted code in such a manner as to generate a specification for the extracted code. Here, the specification can be generated in various forms such as a graph, a specific specification language, and a formula.

The overall flow specification generation unit 340 generates the flow specification of the entire code by collecting the generated flow specification of each module. For example, the overall flow specification generator 340 collects the generated flow specification of each module and the library information flow specification to generate a flow specification of the entire code. On the other hand, the whole flow specification generator 340 can generate a flow specification of the entire code by using an algorithm or an equation solution that repeatedly obtains fixed points according to the specification type.

The flow specification analyzing unit 350 analyzes the generated overall flow specification and the information leak detecting unit 360 extracts the information leak point of the application through the analysis of the flow specification analyzing unit 350. [ On the other hand, the flow specification analyzer 350 and the information leak detector 360 may be composed of a separate analyzer and an extractor, or may be configured as one.

On the other hand, the overall flow specification generator 340 may generate a flow statement including character string analysis for identification of the information destination. The flow specification analyzing unit 350 and the information output destination extracting unit 360 may also trace the string calculation results as much as necessary when tracking the information flow in the code to calculate the destination information corresponding to the sink of the code. On the other hand, the information outflow destination information includes all destinations that can be connected to the communication means of the user terminal 20 such as an Internet URL, a telephone number, and an e-mail address.

The information leakage result transmitting unit 370 transmits the information leakage information including the information leakage destination to the database server 200 or the user terminal 20. At this time, the information leakage result transmitting unit 370 may transmit the information, together with the information leakage information, to the database server 200 or the user terminal 20.

5 is a flowchart illustrating an information leakage analysis method of an application according to an embodiment of the present invention.

Referring to FIG. 5, the method for analyzing information leakage of an application according to embodiments of the present invention is for analyzing information leakage from an application requested by a user terminal 20 and providing the result.

At this time, in order to prevent the execution performance of the application in the user terminal 20 from deteriorating, it is desirable to receive a request for information leakage before the application is executed.

First, a request for information leakage information about the application is received from the user terminal 20 (S100). At this time, the interface unit 230 of the database server 200 may receive the request from the user terminal 20, and the analysis server 300 may directly receive the request from the user terminal 20.

On the other hand, when receiving a request from the user terminal 20, the apparatus determines whether there is information analysis information analyzed for the request application (S200). For example, the interface unit 230 of the database server 200 can determine whether there is a pre-analysis result, and the analysis server 300 can directly determine whether the pre-analysis result exists.

As a result of the determination, if there is information leakage information analyzed previously, the information leakage information analyzed in step S250 is returned to the user terminal 20 (S250). At this time, the database server 200 responds to the information analysis information analyzed by the user terminal 20 or the analysis server 300 may reply the analyzed information distribution information to the user terminal 20 .

If the analyzed information leakage information does not exist, the database server 200 requests the analysis server 300 to analyze the information leakage of the requested application. If the analysis server 300 directly determines the presence or absence of the analysis result, this step may be omitted.

Then, the analysis server 300 receives the information leakage analysis request of the application, and determines an object to be traced of the analyzed application based on the list stored in advance or the access right given to the application (S300). Specifically, the tracking target determination unit 310 of the analysis server 300 performs this step.

The analysis server 300 separates the code from the package of the application to be tracked and extracts the code of the application requested for analysis (S400). Specifically, the code extracting unit 320 of the analysis server 300 performs this step.

The analysis server 300 generates a data flow graph and an information flow graph of the extracted code and generates a module-specific flow specification of the extracted code (S500). Specifically, the module-specific flow specification generator 330 of the analysis server 300 performs this step.

The analysis server 300 collects the generated flow specification for each module to generate a flow specification of the entire code (S600). Specifically, the entire flow specification generation unit 340 of the analysis server 300 performs this step.

The analysis server 300 analyzes the generated overall flow specification (S700). Specifically, the flow specification analyzing unit 350 of the analysis server 300 performs this step.

The analysis server 300 extracts the information outflow of the application through the whole flow specification analysis (S800). Specifically, the information leak detection unit 360 of the analysis server 300 performs this step.

The analysis server 300 transmits the information leakage information including the information leakage to the database server 200 or the user terminal 20 (S900).

As described above, according to the present invention, not only whether information is leaked to an application used by a user, but also an analysis result about an information leak point, reliability of the analysis result can be improved, and stability of the application used by the user can be provided .

It is to be understood that the present invention is not limited to the above-described embodiment, and that various changes and modifications may be made without departing from the scope of the present invention. That is, the present invention is not limited to the above-described embodiments but is defined by the scope of the claims, and those skilled in the art will understand that various modifications and alterations may be made within the scope of the claims It is self-evident.

10: App Market 20: User Terminal
200: Database server
210: application package collection unit 220: package DB
230: interface part 240: analysis result DB
300: Analysis server
310: tracking target determination unit 320: code extraction unit
330: module-specific flow specification generation unit 332: data flow graph generation unit
334: Information Flow Graph Generation Unit 340: Overall Flow Specification Generation Unit
350: Flow specification analyzing unit 360: Information output destination extracting unit
370: Information leak result transmission unit

Claims (14)

An apparatus for analyzing information leakage of a user's application,
A database server for collecting package information for an application from an application market, receiving a request for analyzing the information leakage of the application from a user and responding to the information leakage information of the application to the user; And
And an analysis server for analyzing the code of the application and providing the information leakage information of the application to the database server in response to an analysis request for information leakage of the application from the database server. The method according to claim 1,
Wherein the information leakage information of the application includes information on whether or not information is leaked by the application and information leakage information. The system according to claim 1, wherein the database server
An application package collecting unit for collecting the application or package information of the application from the app market;
A package DB for storing application or application package information collected by the application package collecting unit and delivering the package information of the application when the analysis server requests the analysis server to analyze the information leakage;
An analysis result DB for storing an analysis result of information leakage of the application received from the analysis server; And
Receiving an information leakage request of the application from the user, responding to the information leakage information of the application to the user, instructing the application package collection unit to collect package information for the application, And an interface unit for requesting analysis of an information leakage of the application. The method of claim 3,
Wherein the interface unit receives the package name, version information, and hash information of the application from the user or receives the application package. The method of claim 3,
Wherein the interface unit determines through the analysis result DB whether there is a result of analyzing the information leakage information of the application for which information leakage is requested from the user,
If a result of the pre-analysis is present as a result of the determination, the analysis result stored in the DB is responded to the user,
And if the result of the analysis is not present, the analysis server makes an analysis request to the analysis server. The system of claim 1, wherein the analysis server
A tracking object determining unit that receives an analysis request of the application from the database server and determines an object to be tracked from among information accessed by the analyzed application based on a list stored in advance or an access right granted to the application;
A code extracting unit for extracting a code of an application requested to be analyzed by separating a code from a package of the application to be tracked;
A module-specific flow specification generation unit for generating a data flow graph and an information flow graph of the extracted code and generating a flow specification for each module of the extracted code;
An overall flow specification generation unit for collecting the generated flow specification of each module to generate a flow specification of the entire code;
A flow specification analyzer for analyzing the generated overall flow specification;
An information leakage extracting unit for extracting an information leakage point of the application through the analysis of the flow specification analyzing unit; And
And an information outflow result transmitting unit for transmitting the information outflow information including the information outflow to the database server. The method according to claim 6,
The module-specific flow specification generation unit generates a specification of an information flow between a source to which a tracking target information resource is input and a sink to which information is output for each module of the code,
Wherein the overall flow specification generation unit collects the generated flow specification of each module and the library information flow specification to generate a flow specification of the entire code. A tracking target determining unit that receives a request for information analysis analysis of an application from a user and determines an object to be tracked from among information accessed by the application requested to be analyzed based on a list stored in advance or an access right granted to the application;
A code extracting unit for extracting a code of an application requested to be analyzed by separating a code from a package of the application to be tracked;
A module-specific flow specification generation unit for generating a data flow graph and an information flow graph of the extracted code and generating a flow specification for each module of the extracted code;
An overall flow specification generation unit for collecting the generated flow specification of each module to generate a flow specification of the entire code;
A flow specification analyzer for analyzing the generated overall flow specification;
An information leakage extracting unit for extracting an information leakage point of the application through the analysis of the flow specification analyzing unit; And
And an information leakage result transmission unit for responding to the information leakage information including the information leakage destination to the user. 9. The method of claim 8,
The module-specific flow specification generation unit generates a specification of an information flow between a source to which a tracking target information resource is input and a sink to which information is output for each module of the code,
Wherein the overall flow specification generation unit collects the generated flow specification of each module and the library information flow specification to generate a flow specification of the entire code. 9. The method of claim 8,
Wherein the application information analysis unit analyzes the information leakage of the application by receiving only the identification information of the application from the user or receiving the application package itself. The database server receiving an information flow analysis request of the application from the user;
Determining whether the analyzed information outflow information for the requested application is present in the database server;
If the information leakage information analyzed previously is present, the database server responding to the user with the information leakage information analyzed previously;
Requesting the analysis server to analyze the information leakage of the requested application if the analyzed information leakage information does not exist as a result of the determination;
The analysis server receives the information leakage analysis request of the application and determines an object to be traced of the analyzed application based on a list stored in advance or an access right given to the application;
Separating a code from a package of the application determined to be tracked by the analysis server and extracting a code of the application requested to be analyzed;
The analysis server generating a data flow graph and an information flow graph of the extracted code and generating a flow specification for each module of the extracted code;
The analysis server collecting the generated flow specification for each module to generate a flow specification of the entire code;
Analyzing the generated overall flow specification;
Extracting an information outlet of the application through the analysis of the entire flow specification;
The analysis server transmitting information leakage information including the information leakage to the database server; And
And the database server responding to the information leakage information of the application to the user. Receiving, by the analysis server, an information leak analysis request of an application from a user, and determining an object to be traced of the analysis requested application based on a list stored in advance or an access right given to the application;
Separating a code from a package of the application determined to be tracked by the analysis server and extracting a code of the application requested to be analyzed;
The analysis server generating a data flow graph and an information flow graph of the extracted code and generating a flow specification for each module of the extracted code;
The analysis server collecting the generated flow specification for each module to generate a flow specification of the entire code;
Analyzing the generated overall flow specification;
Extracting an information outlet of the application through analysis of the entire flow specification by the analysis server; And
And the analysis server responding to the information leakage information including the information leakage point to the user. 13. The method according to claim 11 or 12,
The step of generating the module-
Generating a specification of an information flow between a source for inputting a tracking object information resource and a sink for outputting information for each module of the code,
The step of generating the full flow specification
And collecting the generated module-specific flow specifications and the library information flow specification to generate a flow specification of the entire code. 13. The method according to claim 11 or 12,
Wherein the receiving of the information flow analysis request of the application from the user is received before or after execution of the application from the user equipment.

Images