«上一篇/Previous Article|本期目录/Table of Contents|下一篇/Next Article»

《计算机技术与发展》[ISSN:1006-6977/CN:61-1281/TN]

卷:

24

期数:

2014年05期

页码:

142-145

栏目:

安全与防范

出版日期:

2014-05-31

文章信息/Info

Title:

Hidden Technology and Method of Detection in Android System

文章编号:

1673-629X（2014）05-0142-04

作者:

平程; 蔡皖东

西北工业大学 计算机学院

Author(s):

PING Cheng; CAI Wan-dong

关键词:

Android系统; 隐藏技术; Rootkit; 检测

Keywords:

Android system; concealing; Rootkit; detection

分类号:

TP316

文献标志码:

A

摘要:

Android木马通过获取系统root权限，修改内核表项实现隐藏功能，进而躲避木马查杀软件的检测。因此研究An-droid系统隐藏技术对于发现隐藏木马、提高查杀软件的检测能力有重要意义。文中在传统Linux系统隐藏技术的基础上，对Android系统服务启动过程进行分析，探究出适用于Android系统的隐藏方法，并实现了一种Android Rootkit木马原型，用于测试现有木马检测软件对该类型木马的检测能力。文中提出了针对此类Rootkit型木马的检测方法，实验证明这些方法对检测此类木马有一定的作用。

Abstract:

Getting the access to root privileges,the Android Trojan not only modifies important tables in the kernel to hide,but also leaves away from the detection of anti-virus software. So it's very important to discover hidden technology in Android system for finding hid-den Trojan and improving detection capability. Based on the traditional hidden technology in Linux system,analyze the Android system service startup process,explore the hidden technology in Android system,and realize a prototype of Android Rootkit Trojan to test the de-tection capability of existing software in related to this type of Trojan. A detection technology is presented which focuses on finding Root-kit Trojan and the experiment shows the method plays a certain role in detecting.

常用功能

更新日期/Last Update: 1900-01-01