计算机工程2017，Vol.43Issue(11)：122-127,139,7.DOI:10.3969/j.issn.1000-3428.2017.11.020
基于函数调用图的Android重打包应用检测
Android Repackaged Application Detection Based on Function Call Graph
摘要
Abstract
Aiming at the phenomenon that there is an increasing number of repackaged applications in the Android third-party application market,this paper proposes a method of detecting Android repackaged applications by using function call graph.It decompiles the application to gain the Smali code,analyzes the Smali code to generate a function call graph,processes the function call graph by using theoperationcode as the attribute of the node,filters the third-party library,and saves the Application Program Interface (API) associated with the interface.On this basis,it uses the Motifs' substructure to representthe function call graph.According to the similarity of the subgraph,it computes the similarity of the application,so as to determine whether it is a repackaged application.Detection results in 1 630 applications in the market show that the proposed method has higher accuracy and better expansibility.关键词
Android系统/重打包应用/函数调用图/相似度/子图Key words
Android system/repackaged application/function call graph/similarity/subgraph分类
信息技术与安全科学引用本文复制引用
吴兴茹,何永忠..基于函数调用图的Android重打包应用检测[J].计算机工程,2017,43(11):122-127,139,7.基金项目
国家自然科学基金(61402035). （61402035）
