On lightweight mobile phone application certification

摘要: Users have begun downloading an increasingly large number of mobile phone applications in response to advancements handsets and wireless networks. The increased results a greater chance installing Trojans similar malware. In this paper, we propose the Kirin security service for Android, which performs lightweight certification mitigate malware at install time. uses rules, are templates designed conservatively match undesirable properties configuration bundled with applications. We use variant requirements engineering techniques perform in-depth analysis Android produce set rules that characteristics. sample 311 most popular downloaded from official Market, our found 5 implement dangerous functionality therefore should be installed extreme caution. Upon close inspection, another five asserted rights, but were within scope reasonable functional needs. These indicate provides practical means detecting