WU Han,LI Yongzhen*.The design of Android application security protectionscheme based on the single block hash fuction[J].Journal of Yanbian University,2017,43(01):51-54.
基于单分组散列函数的安卓应用程序保护方案的设计
- Title:
- The design of Android application security protection scheme based on the single block hash fuction
- 分类号:
- TP309.2
- 文献标志码:
- A
- 摘要:
- 针对安卓手机的安全保护机制,提出了一种基于单分组散列函数的数字签名机制和关键资源保护机制相结合的保护方案.首先该方案通过安全文件生成器将关键资源文件的哈希值保存到安全文件中,然后使用数字签名机制保证安全文件不被篡改,最后由关键资源保护机制确保关键资源文件的完整性,其中包括对被篡改的关键资源进行纠错.实验结果表明,本方案不仅能够有效地防止安卓应用程序被篡改,而且增加了逆向攻击的难度.
- Abstract:
- According to the security protection mechanism of Android mobile phone, a protection scheme based on single block hash function and digital signature mechanism is proposed. The first hash file generator will be the key security resource files saved to the file security value through the program, to ensure the safety of the file has not been tampered and then use the digital signature mechanism, and finally by the key resource protection mechanism to ensure the integrity of key resource files, including error correction of key resources has been tampered with. The experimental results show that the proposed scheme can not only prevent the Android application from being tampered with, but also increase the difficulty of reverse attack.
参考文献/References:
[1] 360互联网安全中心.2016年第二季度中国手机安全状况报告[EB/OL].[2016-07-29]. http://zt.360.cn/1101061855.php?dtid=1101061451&did=3701370185.
[2] 张志远,万月亮,翁越龙,等.Android应用逆向分析方法研究[J].信息网络安全, 2013(6):65-68.
[3] Collberg C, Thomborson C, Low D. A taxonomy of obfuscating transformations[D]. New Zealand: The University of Auckland, 1997.
[4] 向模军.利用JNI实现Java与C++通信[J].计算机时代, 2009(12):56-57.
[5] 雷灵光,张中文,王跃武,等.Android系统代码签名验证机制的实现及安全性分析[J].信息网络安全,2012(8):61-63.
[6] 曲乐炜,罗森林,孙志鹏,等.Android系统数据完整性检测方法研究[J].信息网络安全,2016(8):61-67.
[7] 郑光明,胡博.基于MD5的文件完整性检测软件设计[J].湖南理工学院学报(自然科学版),2007,20(1):35-38.
[8] 周莹冰.基于S盒的单分组哈希函数的设计与实现[D].延吉:延边大学,2015:9-12.
相似文献/References:
[1]姜璇,李永珍.基于哈希链的序列密码算法[J].延边大学学报(自然科学版),2015,41(03):249.
JIANG Xuan,LI Yongzhen*.Stream cipher algorithm based on Hash chain[J].Journal of Yanbian University,2015,41(01):249.
备注/Memo
收稿日期: 2016-12-12
*通信作者: 李永珍(1971—),男,博士,副教授,研究方向为网络安全、无线网络协议.