Research on Static Analysis Technology of Android Application Security Defects

Abstract

With the rapid development of mobile Internet, the number of smart phone users is increasing, especially android smart phone users, the security defects of android application emerge in endlessly. In this paper, android application security defects are divided into three, include vulnerabilities defects, components defects and configuration defects. Focus these security defects, first static analysis the bytecode file, then use the resolution android bytecode as an inspection vehicle, design detector for each species vulnerability based on visitor pattern. Finally, part of the code is achieved, practice has proved that the scheme can meet Android application security defects detection requirements in the static testing.