WO2016107343A1 - Detection method and device for application privacy security information - Google Patents

Abstract

Disclosed are a detection method and device for application privacy security information, which relate to the technical field of information security, can more fully analyse and detect the application privacy security information, and can improve the detection efficiency of the application privacy security information at the same time. The method comprises: firstly acquiring an installation document of an application, then decompressing the installation document to obtain a privacy access permission and a background operation mode corresponding to the application, and finally detecting the application privacy security information according to the privacy access permission and/or the background operation mode. The present invention is applicable to the protection of a user's privacy security.

Description

Method and device for detecting privacy security information Technical field

The present invention relates to an information security technology, and in particular to a method and apparatus for detecting privacy security information.

Background technique

In recent years, with the rapid development of smart terminal devices, intelligent mobile operating systems have brought more, more people, simple, pleasant and practical experiences. Currently popular operating systems on the market are: Apple's iOS system, Google's Android system, Microsoft's Windows Phone system, etc. These operating systems can be configured with many applications, making smart terminal devices rich in functions. However, for some applications with specific permissions, it may be harmful to the security of user privacy information.

At present, in order to prevent infringement of user privacy, it is necessary to first install the application on the operating system, then manually view and manually record the privacy access rights of the application in the privacy settings of the operating system, and then manually analyze the application privacy according to the privacy access authority. Security Information.

However, the above-mentioned manual detection method can achieve the purpose of detecting the application of privacy and security information, but the precondition for the detection is that the application is installed on the operating system, and the detection process and the detection result recording process are manually completed, which takes time. Laborious, resulting in low detection efficiency; at the same time, because the application of private security information based on privacy access analysis, the detection of application privacy security information is not comprehensive.

Summary of the invention

In view of this, the present invention provides a method and apparatus for detecting privacy security information, and the main purpose thereof is to improve detection efficiency and detection accuracy of application privacy security information.

According to an aspect of the present invention, a method for detecting privacy security information is provided, including include:

Get the installation file of the app;

Decompressing the installation file to obtain a privacy access right and a background running mode corresponding to the application;

The application privacy security information is detected according to the privacy access right and/or the background running mode.

On the other hand, an embodiment of the present invention provides a device for detecting privacy security information, including:

An obtaining unit for obtaining an installation file of the application;

a decompression unit, configured to decompress the installation file obtained by the acquiring unit, to obtain a privacy access right and a background operation mode corresponding to the application;

And a detecting unit, configured to detect the application privacy security information according to the privacy access right and/or the background running mode.

According to still another aspect of the present invention, a computer program is provided, comprising computer readable code, when the computer readable code is executed on a terminal device, causing the terminal device to perform any of the above application privacy security information Detection method.

According to still another aspect of the present invention, a computer readable medium storing a computer program for executing the detection method of any of the application privacy security information described above is stored.

With the above technical solution, the technical solution provided by the embodiment of the present invention has at least the following advantages:

The technical solution provided by the embodiment of the present invention first obtains an installation file of the application, and then decompresses the installation file to obtain a privacy access right and a background running mode corresponding to the application, and finally according to the privacy access right and/or the background. The operating mode detects the application privacy security information. The embodiment of the present invention can perform more comprehensive analysis and detection on the application privacy security information according to the privacy access right and the background running mode, and the detection and detection are performed according to the privacy access right of the application. The process and test result recording process can be automatically performed by the intelligent terminal, thereby improving the detection efficiency.

The above description is only an overview of the technical solutions of the present invention, and in order to more clearly understand the technical means of the present invention, it can be implemented in accordance with the contents of the specification, and in order to make the above-mentioned Other objects, features, and advantages will be apparent from the following description.

DRAWINGS

Various other advantages and benefits will become apparent to those skilled in the <RTIgt; The drawings are only for the purpose of illustrating the preferred embodiments and are not to be construed as limiting. Throughout the drawings, the same reference numerals are used to refer to the same parts. In the drawing:

FIG. 1 is a flowchart of a method for detecting privacy security information according to an embodiment of the present invention;

FIG. 2 is a flowchart of another method for detecting privacy security information according to an embodiment of the present invention;

FIG. 3 is a schematic structural diagram of a device for detecting privacy security information according to an embodiment of the present invention.

FIG. 4 is a schematic structural diagram of another apparatus for detecting privacy security information according to an embodiment of the present invention;

Figure 5 shows a block diagram of a terminal device for performing the method according to the invention;

Figure 6 shows a storage unit for holding or carrying program code implementing the method according to the invention.

detailed description

Exemplary embodiments of the present disclosure are described in more detail below with reference to the accompanying drawings. While the embodiments of the present invention have been shown in the drawings, the embodiments Rather, these embodiments are provided so that this disclosure will be more fully understood, and the scope of the disclosure will be fully disclosed to those skilled in the art.

An embodiment of the present invention provides a method for detecting privacy security information. As shown in FIG. 1 , the method may be applied to a smart terminal, where the method includes:

101. Obtain an installation file of the application.

For the embodiment of the present invention, when the operating system is the ios system of Apple Inc., the installation file of the corresponding application can be downloaded from the official Apple App Store. At this time, the installation file can be an IPA (iPhone Application) format file, when the operating system is In the Android system, the installation file of the corresponding application can also be downloaded from the third-party application distribution platform. At this time, the installation file can be an APK (Android Package) format file.

102. Decompress the installation file to obtain a privacy access permission and a background operation mode corresponding to the application.

The privacy access permission is a specific permission that the application has, for example, access rights to private data such as contact information, photo information, and short information stored in the terminal, and the background running mode may specifically be that the application has a function running in the background. In Apple's iOS system, there is a strict requirement for the authorization of the background running mode of the application. At present, only the application running mode with the music playing function, or the navigation function or the network phone function is authorized.

103. Detect the application privacy security information according to the privacy access right and/or the background running mode.

For the embodiment of the present invention, the application of the privacy security information is detected by the combination of the privacy access right and/or the background running mode, and is more comprehensive than the current detection of the application security security information only through the privacy access right. The analysis of the application privacy security information improves the detection efficiency of the application privacy security information.

The method for detecting the application of the privacy security information provided by the embodiment of the present invention first obtains an installation file of the application, and then decompresses the installation file to obtain a privacy access right and a background operation mode corresponding to the application, and finally according to the privacy access. The rights and/or the background mode of operation detect the application privacy security information. The embodiment of the present invention can perform more comprehensive analysis and detection on the application privacy security information according to the privacy access right and the background running mode, and the detection and detection are performed according to the privacy access right of the application. The process and test result recording process can be automatically performed by the intelligent terminal, thereby improving the detection efficiency.

Further, the embodiment of the present invention provides another method for detecting privacy security information. As shown in FIG. 2, the method may be applied to a smart terminal, where the method includes:

201. Obtain an installation file of the application.

For the embodiment of the present invention, when the operating system is the ios system of Apple Inc., the installation file of the corresponding application can be downloaded from the official Apple App Store. At this time, the installation file can be an IPA (iPhone Application) format file, when the operating system is In the Android system, the installation file of the corresponding application can also be downloaded from the third-party application distribution platform. At this time, the installation file can be an APK (Android Package) format file.

202. Decompress the installation file to obtain a privacy access permission and a background operation mode corresponding to the application.

For the embodiment of the present invention, decompressing the installation file to obtain the privacy access right corresponding to the application may include: decompressing the installation file, obtaining an executable file corresponding to the application, and then parsing the file by using a preset command line tool. An executable file that obtains the privacy access rights corresponding to the application. The executable file is a portable executable (PE) file format file, which can be loaded into the memory and executed by the operating system loader, and can be an .exe file, a .sys file, a .com file, or the like.

For example, when the operating system is Apple's iOS system, the command line tool can be the otool command line tool in the XCode programming software. The executable file is parsed by the command line tool to obtain the privacy access right of the application. Compared with the current manual detection, the command can be parsed by the command line tool to obtain the privacy access permission of the application. The accuracy of the detection, and the detection process and the detection result recording process can be automatically performed by the intelligent terminal, thereby improving the detection efficiency.

Further, the decompressing the installation file to obtain the executable file corresponding to the application may include: decompressing the installation file, obtaining a configuration information file, and then obtaining executable executables corresponding to the application from the configuration information file. a file name, and finally obtaining an executable file corresponding to the application from the installation file according to the executable file name.

The configuration information file may be a structured text file, which contains some important configuration information, and when read by the system, may provide application configuration information to the system. For example, when the operating system is Apple's ios system, the configuration information file can be an Info.plist file, and the Info.plist file is a structured text file containing some important ios applications. Configuration information, for example, includes localized language, application icon name, name of the help file, executable file name, background run mode, and more. The Info.plist file contains the executable name CFBundleExecutable. For the embodiment of the present invention, decompressing the installation file to obtain a background running mode corresponding to the application may include: decompressing the installation file, obtaining a configuration information file of the application, and then using the preset command line tool to In the configuration information file, the background running mode corresponding to the application is obtained.

For example, when the operating system is an iOS system of Apple, the configuration information file may be an Info.plist file, and the background running mode included in the Info.plist file is UIBackgroundModes, and only when the application of the privacy security information is currently detected. Compared with the manual access mode, the embodiment of the present invention increases the acquisition and analysis of the application background running mode, and can more comprehensively detect the application privacy security information.

203. Detect the application privacy security information according to the privacy access right and/or the background running mode.

Specifically, detecting whether the privacy access right of the application meets a preset condition, and detecting whether the application category information corresponding to the application matches the preset application category information, where the preset application category information is authorized in the ios system. The application category information corresponding to the application running in the background running mode.

The preset condition can be configured according to the actual needs of the user. For example, the preset condition can be configured to have no access right to private data such as contact information, photo information, and short information saved in the terminal. In Apple's ios system, there is a strict requirement for the authorization of the background running mode of the application. At present, only the application with the music playing function, or the navigation function or the network telephone function is authorized to run the background running mode. Therefore, the preset application category information can be Configured as a music player application, navigation application, VoIP application

204. If the privacy access permission of the application does not meet the preset condition or the application category information corresponding to the application does not match the preset application category information, perform an alarm.

Specifically, if the privacy access right of the application does not meet the preset condition or the application category information corresponding to the application does not match the preset application category information, the threat identifier may be applied to the application, or the prompt information may be displayed in real time to prompt The user is at risk of this application.

For the embodiment of the present invention, in the iOS system of the Apple, the process of decompressing the installation file to obtain the privacy access right and the background running mode corresponding to the application may include:

First, download the installation file of the ios application to the smart terminal. The installation file can be downloaded from the official AppStore store of Apple or from the application distribution platform of the third party; then decompress the IPA installation file of the ios application through the decompression tool. a configuration information file, that is, an Info.plist file; and then by checking the Info.plist file information, obtaining a background running mode of the ios application, that is, UIBackgroundModes, and acquiring an executable file name of the ios application, that is, CFBundleExecutable, and then according to CFBundleExecutable, decompressing the IPA installation file of the ios application by a decompression tool to obtain an executable file of the ios application; finally, analyzing and applying the executable file of the ios application through the otool command line tool in the XCode programming software The executable file is parsed to obtain the ios Framework configured in the ios application, and the privacy access permission of the ios application is obtained through the ios Framework, wherein the specific manifestation of the ios Framework can be as follows:

Ios Framework name	Features
AddressBook	Address book
AssetsLibrary	Album (photo and video)
EventKit	calendar
CoreLocation	Location service

The above table only lists some information about the ios Framework related to the application of privacy security information, but is not limited thereto. For the multiple ios applications, the above steps are sequentially performed, and information such as the privacy access right and the background running mode of each ios application can be obtained.

Another method for detecting privacy security information provided by an embodiment of the present invention first obtains an installation file of an application, and then decompresses the installation file to obtain a privacy access right corresponding to the application. And the background running mode, and finally detecting the application privacy security information according to the privacy access right and/or the background running mode. The embodiment of the present invention can perform more comprehensive analysis and detection on the application privacy security information according to the privacy access right and the background running mode, and the detection and detection are performed according to the privacy access right of the application. The process and test result recording process can be automatically performed by the intelligent terminal, thereby improving the detection efficiency.

Further, as a specific implementation of the method in FIG. 1, the embodiment of the present invention provides a device for detecting privacy security information. As shown in FIG. 3, the device may be an intelligent terminal, and the device may include: an acquiring unit. 31. Decompression unit 32 and detection unit 33.

The obtaining unit 31 may be configured to acquire an installation file of the application.

The decompression unit 32 can be used to decompress the installation file acquired by the obtaining unit 31, and obtain the privacy access right and the background running mode corresponding to the application.

The detecting unit 33 may be configured to detect the application privacy security information according to the privacy access right and/or the background running mode.

It should be noted that, for other corresponding descriptions of the functional units involved in the data processing apparatus provided by the embodiments of the present invention, reference may be made to the corresponding description in the method shown in FIG. 1 , and details are not described herein again.

The device for detecting privacy security information provided by the embodiment of the present invention first obtains an installation file of an application, and then decompresses the installation file to obtain a privacy access right and a background operation mode corresponding to the application, and finally according to the privacy access. The rights and/or the background mode of operation detect the application privacy security information. The embodiment of the present invention can perform more comprehensive analysis and detection on the application privacy security information according to the privacy access right and the background running mode, and the detection and detection are performed according to the privacy access right of the application. The process and test result recording process can be automatically performed by the intelligent terminal, thereby improving the detection efficiency.

Further, as a specific implementation of the method in FIG. 2, the embodiment of the present invention provides another apparatus for detecting privacy security information. As shown in FIG. 4, the apparatus may be an intelligent terminal, and the apparatus includes: acquiring The unit 41, the decompression unit 42, and the detection unit 43.

The obtaining unit 41 can be configured to acquire an installation file of the application.

The decompression unit 42 can be used to decompress the installation file acquired by the obtaining unit 41, and obtain the privacy access right and the background running mode corresponding to the application.

The detecting unit 43 may be configured to detect the application privacy security information according to the privacy access right and/or the background running mode.

Further, the decompressing unit 42 is specifically configured to decompress the installation file to obtain an executable file corresponding to the application, and parse the executable file by using a preset command line tool to obtain a privacy access permission corresponding to the application. .

Further, the decompression unit 42 includes:

The first decompression module 421 is configured to decompress the installation file to obtain a configuration information file configuration information file.

The first obtaining module 422 is configured to obtain, by using the preset command line tool, the background running mode corresponding to the application from the configuration information file.

Further, the decompression unit 42 further includes:

The second decompression module 423 is configured to decompress the installation file to obtain a configuration information file.

The second obtaining module 424 is configured to obtain an executable file name corresponding to the application from the configuration information file obtained by the second decompression module 423.

The second obtaining module 424 is further configured to obtain, from the installation file, an executable file corresponding to the application according to the obtained executable file name.

Further, the application is an ios application, and the detecting unit 43 is specifically configured to detect whether the privacy access right of the application meets a preset condition, and detect whether the application category information corresponding to the application is related to preset application category information. Matching, the preset application category information is application category information corresponding to an application authorized to perform a background running mode in the ios system.

Further, the device further includes:

The alarm unit 44 is configured to perform an alarm if the privacy access right of the application does not meet the preset condition or the application category information corresponding to the application does not match the preset application category information.

It should be noted that other corresponding descriptions of the functional units involved in the data processing apparatus provided by the embodiment of the present invention may be referred to the corresponding description in the method shown in FIG. 2, and details are not described herein again.

Another apparatus for detecting privacy security information provided by an embodiment of the present invention first acquires Using the installation file, and then decompressing the installation file, obtaining the privacy access right and the background running mode corresponding to the application, and finally detecting the application privacy security information according to the privacy access right and/or the background running mode. . The embodiment of the present invention can perform more comprehensive analysis and detection on the application privacy security information according to the privacy access right and the background running mode, and the detection and detection are performed according to the privacy access right of the application. The process and test result recording process can be automatically performed by the intelligent terminal, thereby improving the detection efficiency.

In the above embodiments, the descriptions of the various embodiments are different, and the details that are not detailed in a certain embodiment can be referred to the related descriptions of other embodiments.

It will be appreciated that related features in the above methods and apparatus can be referenced to each other. In addition, "first", "second", and the like in the above embodiments are used to distinguish the embodiments, and do not represent the advantages and disadvantages of the embodiments.

A person skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the system, the device and the unit described above can refer to the corresponding process in the foregoing method embodiment, and details are not described herein again.

The algorithms and displays provided herein are not inherently related to any particular computer, virtual system, or other device. Various general purpose systems can also be used with the teaching based on the teachings herein. The structure required to construct such a system is apparent from the above description. Moreover, the invention is not directed to any particular programming language. It is to be understood that the invention may be embodied in a variety of programming language, and the description of the specific language has been described above in order to disclose the preferred embodiments of the invention.

In the description provided herein, numerous specific details are set forth. However, it is understood that the embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures, and techniques are not shown in detail so as not to obscure the understanding of the description.

Similarly, the various features of the invention are sometimes grouped together into a single embodiment, in the above description of the exemplary embodiments of the invention, Figure, or a description of it. However, the method disclosed is not to be interpreted as reflecting the intention that the claimed invention requires more features than those recited in the claims. More precisely, as the following rights As reflected in the book, the inventive aspects reside in less than all of the features of the single embodiments disclosed above. Therefore, the claims following the specific embodiments are hereby explicitly incorporated into the embodiments, and each of the claims as a separate embodiment of the invention.

Those skilled in the art will appreciate that the modules in the devices of the embodiments can be adaptively changed and placed in one or more devices different from the embodiment. The modules or units or components of the embodiments may be combined into one module or unit or component, and further they may be divided into a plurality of sub-modules or sub-units or sub-components. In addition to such features and/or at least some of the processes or units being mutually exclusive, any combination of the features disclosed in the specification, including the accompanying claims, the abstract and the drawings, and any methods so disclosed, or All processes or units of the device are combined. Each feature disclosed in this specification (including the accompanying claims, the abstract and the drawings) may be replaced by alternative features that provide the same, equivalent or similar purpose.

In addition, those skilled in the art will appreciate that, although some embodiments described herein include certain features that are included in other embodiments and not in other features, combinations of features of different embodiments are intended to be within the scope of the present invention. Different embodiments are formed and formed. For example, in the following claims, any one of the claimed embodiments can be used in any combination.

The various component embodiments of the present invention may be implemented in hardware, or in a software module running on one or more processors, or in a combination thereof. Those skilled in the art will appreciate that a microprocessor or digital signal processor (DSP) may be used in practice to implement some or all of some or all of the components of the method and apparatus for detecting privacy security information in accordance with embodiments of the present invention. All features. The invention can also be implemented as a device or device program (e.g., a computer program and a computer program product) for performing some or all of the methods described herein. Such a program implementing the invention may be stored on a computer readable medium or may be in the form of one or more signals. Such signals may be downloaded from an Internet website, provided on a carrier signal, or provided in any other form.

For example, FIG. 5 illustrates a terminal device that can implement detection of application privacy security information in accordance with the present invention. The terminal device conventionally includes a processor 510 and a computer program product or computer readable medium in the form of a memory 520. The memory 520 can be, for example, a flash memory, Electronic memory such as EEPROM (Electrically Erasable Programmable Read Only Memory), EPROM, hard disk or ROM. Memory 520 has a memory space 530 for program code 531 for performing any of the method steps described above. For example, storage space 530 for program code may include various program code 531 for implementing various steps in the above methods, respectively. The program code can be read from or written to one or more computer program products. These computer program products include program code carriers such as hard disks, compact disks (CDs), memory cards or floppy disks. Such computer program products are typically portable or fixed storage units as described with reference to FIG. The storage unit may have a storage section, a storage space, and the like arranged similarly to the storage 520 in the terminal device of FIG. The program code can be compressed, for example, in an appropriate form. Typically, the storage unit comprises computer readable code 531 'is a code readable by a processor, such as 510, which when executed by the terminal device causes the terminal device to perform each of the methods described above step.

It is to be noted that the above-described embodiments are illustrative of the invention and are not intended to be limiting, and that the invention may be devised without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as a limitation. The word "comprising" does not exclude the presence of the elements or steps that are not recited in the claims. The word "a" or "an" The invention can be implemented by means of hardware comprising several distinct elements and by means of a suitably programmed computer. In the unit claims enumerating several means, several of these means can be embodied by the same hardware item. The use of the words first, second, and third does not indicate any order. These words can be interpreted as names.

In addition, it should be noted that the language used in the specification has been selected for the purpose of readability and teaching, and is not intended to be construed or limited. Therefore, many modifications and changes will be apparent to those skilled in the art without departing from the scope of the invention. The disclosure of the present invention is intended to be illustrative, and not restrictive, and the scope of the invention is defined by the appended claims.

Claims (14)

1. A method for detecting privacy security information, including:

   Get the installation file of the app;

   Decompressing the installation file to obtain a privacy access right and a background running mode corresponding to the application;

   The application privacy security information is detected according to the privacy access right and/or the background running mode.
2. The method for detecting the application of the privacy security information according to claim 1, wherein the decompressing the installation file to obtain the privacy access rights corresponding to the application comprises:

   Decompressing the installation file to obtain an executable file corresponding to the application;

   The executable file is parsed by a preset command line tool to obtain a privacy access right corresponding to the application.
3. The method for detecting the application of the privacy security information according to claim 2, wherein the decompressing the installation file to obtain a background operation mode corresponding to the application comprises:

   Decompressing the installation file to obtain a configuration information file of the application;

   The background running mode corresponding to the application is obtained from the configuration information file by using the preset command line tool.
4. The method for detecting the application of the privacy security information according to claim 2, wherein the decompressing the installation file to obtain the executable file corresponding to the application comprises:

   Decompress the installation file to obtain a configuration information file;

   Obtaining, from the configuration information file, an executable file name corresponding to the application;

   Obtaining an executable file corresponding to the application from the installation file according to the executable file name.
5. The method for detecting the application of the privacy security information according to claim 1, wherein the application is an ios application, and the detecting the application privacy security information according to the privacy access right and the background running mode comprises: :

   Detecting whether the privacy access right of the application meets a preset condition, and detecting whether the application category information corresponding to the application matches the preset application category information, where the preset application category information is an authorized executable background operation in the ios system The application category information corresponding to the application of the mode.
6. The method for detecting the application of privacy security information according to claim 5, further comprising:

   If the privacy access right of the application does not meet the preset condition or the application category information corresponding to the application does not match the preset application category information, an alarm is generated.
7. A detection device for applying privacy security information, comprising:

   An obtaining unit for obtaining an installation file of the application;

   a decompression unit, configured to decompress the installation file obtained by the acquiring unit, to obtain a privacy access right and a background operation mode corresponding to the application;

   And a detecting unit, configured to detect the application privacy security information according to the privacy access right and/or the background running mode.
8. The apparatus for detecting privacy security information according to claim 7, wherein:

   The decompression unit is configured to decompress the installation file to obtain an executable file corresponding to the application, and parse the executable file by using a preset command line tool to obtain a privacy access right corresponding to the application.
9. The apparatus for detecting privacy security information according to claim 8, wherein the decompression unit comprises:

   a first decompression module, configured to decompress the installation file, and obtain a configuration information file configuration information file;

   The first obtaining module is configured to obtain, by using the preset command line tool, a background running mode corresponding to the application from the configuration information file.
10. The apparatus for detecting privacy security information according to claim 8, wherein the decompression unit further comprises:

    a second decompression module, configured to decompress the installation file to obtain a configuration information file;

    a second obtaining module, configured to obtain, from a configuration information file obtained by the second decompression module, an executable file name corresponding to the application;

    The second obtaining module is further configured to obtain, according to the obtained executable file name, an executable file corresponding to the application from the installation file.
11. The apparatus for detecting privacy security information according to claim 7, wherein the application is an ios application.

    The detecting unit is specifically configured to detect whether the privacy access right of the application meets a preset condition, and detect whether the application category information corresponding to the application matches the preset application category information, where the preset application category information is The application category information corresponding to the application that can execute the background running mode is authorized in the ios system.
12. The device for detecting privacy security information according to claim 11, wherein the device further comprises:

    The alarm unit is configured to perform an alarm if the privacy access right of the application does not meet the preset condition or the application category information corresponding to the application does not match the preset application category information.
13. A computer program comprising computer readable code causing the terminal device to perform detection of application privacy security information according to any one of claims 1-6 when the computer readable code is run on a terminal device method.
14. A computer readable medium storing the computer program of claim 13.

Images