CM-Droid: Secure Container for Android Password Misuse Vulnerability

• 作者: Keyue Li Shaozhang Niu Tianyang Li Wen Zhang Zhenguang Gao
• 来源期刊: 计算机、材料和连续体(英文)
• 学科: 工学
• 关键词: PASSWORD MISUSE evaluation model SECURE CONTAINER dynamic repair
• 年，卷（期）: 2019,（4）
• 页码范围: 181-198
• 页数: 18页
• 分类号: TP3

摘要

Android applications are associated with a large amount of sensitive data,therefore application developers use encryption algorithms to provide user data encryption,authentication and data integrity protection.However,application developers do not have the knowledge of cryptography,thus the cryptographic algorithm may not be used correctly.As a result,security vulnerabilities are generated.Based on the previous studies,this paper summarizes the characteristics of password misuse vulnerability of Android application software,establishes an evaluation model to rate the security level of the risk of password misuse vulnerability and develops a repair strategy for password misuse vulnerability.And on this basis,this paper designs and implements a secure container for Android application software password misuse vulnerability:CM-Droid.