南京理工大学学报(自然科学版)2016,Vol.40Issue(2):142-148,7.DOI:10.14177/j.cnki.32-1397n.2016.40.02.003
基于自定义安全策略的Android应用细粒度访问控制方法
Android application fine-grained access control based on self-defined security policy
摘要
Abstract
Aiming at the drawbacks of the Android permission model’s coarse-grained access control and the over-privileged deficiencies,an Android application fine-grained access control method based on the self-defined security policy is proposed. This method applies the security code redirection technology to control the Android application access to the sensitive system resources based on security policies defined and described by users,and remove the over-granted permissions. The ex-perimental results show that the method has good compatibility to different versions of the Android system,and it can limit application access to the sensitive system resources flexibly and effectively.关键词
访问控制/安全策略/代码重定向Key words
access control/security policy/code redirection分类
信息技术与安全科学引用本文复制引用
俞研,金凤,吴家顺..基于自定义安全策略的Android应用细粒度访问控制方法[J].南京理工大学学报(自然科学版),2016,40(2):142-148,7.基金项目
国家自然科学基金(61202352) (61202352)
江苏省自然科学基金(BK20140797) (BK20140797)