PasDroid: 在Android系統上即時防堵惡意軟體的保護方案

Abstract

Android是目前最熱門的智慧型手機系統. 目前的Android系統無法讓使 用者知道應用程式何時存取用戶的私密資料. 再來, 由於Android缺少審核機 制, 使得惡意軟體正爆炸姓成長，而這些惡意軟體可能竊取使用者的私密資 料。利用PasDroid可以降低使用者私密資料被竊取的風險, 並且可以讓使用 者自行定義哪些檔案是私密資料並且持續追蹤這些資料。PasDroid提供白名 單機制讓使用者去控制應用程式允許送出的私密資料類型。當有未經授權 的私密資料被傳送出去前，PasDroid會阻止這筆資料的傳送並且跳出警告視 窗通知使用者。

Today Android has become the most popular smartphone operating systems. The current Android systems fail to provide users with adequate control over and visibility how third-party applications use their private data. Furthermore, Android doesn’t provide app review which brings to the explosion of malware. The malware might steal privacy data stored in Android phone. We reduce the risk of the private data leakage with PasDroid, allowing users to define their own sesntive source and taint tags to simultaneously tracking multiple sources of sensitive data. PasDroid maintains white list per applications installed in Android systems to control the sent data of the application. When there has an authorized data is goind to send out, PasDroid drops the data and shows dialog within detailed information to notify user.