A Novel Hotfix Scheme for System Vulnerability Based on the Android Application Layer. Issue 2 (1st March 2019)

• Record Type: Journal Article
• Authors: Zhang, Wen; Su, Ningning; Niu, Shaozhang; Li, Hui; Huang, Ruqiang
• Is Part Of: Chinese journal of electronics. Volume 28:Issue 2(2019)
• Page Start: 408
• Page End: 415
• Publication Date: 2019-03-01
• Subjects: Hotfix -- Vulnerability fixing -- Construction model; Android (operating system) -- mobile computing -- security of data; Android application layer -- Android system vulnerabilities -- official Android support -- vulnerability feature quantification -- fixing policy customization -- system vulnerability exploitation -- security policy files -- security vulnerability solution -- fixing policy construction model -- DroidHFix -- Hotfix scheme; Electronics -- Periodicals; Electronics -- China -- Periodicals; Electronics; China; Periodicals; 621.38105
• DOI: 10.1049/cje.2019.01.002
• Languages: English
• ISSNs: 1022-4653

Abstract

Abstract : At present, fixing Android system vulnerabilities relies on official Android support and various equipment manufacturers, and it is mainly implemented by system upgrades. This situation causes many problems, such as high costs and delayed fixing of vulnerabilities. This study is performed to design a novel fixing policy construction model targeting Android system vulnerabilities, which can be used for vulnerability feature quantification and fixing policy customization. On this basis, a novel security vulnerability solution called DroidHFix is proposed and implemented. This solution constructs security policies and loads security policy files during the risky application startup. The system helps to fix Android system vulnerabilities dynamically and defend against attacks on the risky application depending on system vulnerability exploitation. Experimental results show that DroidHFix fixes the Android system vulnerabilities effectively, with good performance and compatibility.