随着无线通信技术的发展,智能手机已经成为人们身边必不可少的移动设备,与人们的信息交流与娱乐生活息息相关,但是手机上安装的软件可能会给用户带来潜在的危险。目前,80%以上的智能手机采用的是安卓操作系统,然而安卓恶意软件数量呈现爆炸式增长,各种恶意行为层出不穷,对用户的安全构成了极大的威胁。智能手机上用户的隐私泄露和财产安全问题亟待解决,因此对安卓系统上的恶意软件进行有效准确的检测具有非常重要的意义。文章调查了安卓恶意软件的现状和危害,介绍了恶意软件的分类和特征,分析了恶意软件的权限和行为,总结了恶意软件的渗透和隐身技术,然后提供了恶意软件检测可采用的工具,研究了目前的检测方法,分析了现在的挑战和提出了应对方法,比较了几种机器学习的恶意软件分类方法,最后对未来恶意软件的检测方向进行了展望,对减轻恶意软件的危害提出了建议。
Smart phones are becoming increasingly popular in daily routines around the w orld.However, malware in smart phones is getting more prevalent, and w ill introduce potential risks to smart phone users. Nowadays, eighty percent o f smart phones adopt the Android operating system. However,the number o f A ndroid malware is rapidly increasing, and there are various kinds of malicious behaviors. Android malware has been a great threat to the security o f the mobile users. In this paper,we investigate the harms of the Android malware. We first introduce the classification and features of malware and analyze the permission and behavior of malware. Then we introduce the malware detection tools and summarize the malware penetration and the stealth techniques. Furthermore, weanalyze malware detection methods in prior works. Finally, we propose the detection direction in the future and give some advice to reduce the harm o f malware.