FuzzerAPPAndroid应用程序组件通信鲁棒性测试.pdf

计算机研究与发展 DOI ：10. 75 /issnl000-1239. 2017. Journal of Computer Research and Development 54(2) ：338-347, 2017 F u zzerA P P : A n d r o id 应用程序组件通信鲁棒性测试 张 密 杨 力 张 俊 伟 (西安电子科技大学网络与信息安全学院西安 710071) (zmic@) FuzzerAPP：The Robustness Test of Application Component Communication in Android Zhang Mi, Yang Li, and Zhang Junwei (S c h o o l o f C y b e r E n g in e e r in g , X i d i a n U n iv e rs ity , X V a n 710071) Abstract The study of Android security has attracted wide attention because of the huge share in operation system market for mobile devices. Aiming at the security issues of Android application, this paper presents a robustness test scheme of application components based on fuzzy testing method. Firstly, a test set and the corresponding test cases are designed. These cases are sent to a target application for collecting and analyzing the test data. Considering the time, efficiency and other factors, the test case is sent to the application components to be tested. Then, the interaction information of the target component in the test process and the statistical analysis of the output data are analyzed. According to the design of test scheme, a platform named as FuzzerAPP is implemented which can test the robustness of the common applications in Android system. Many applications in some famous Android application markets are tested under FuzzerAPP, and the experiments results are collected. By the analysis of the test data, we find that if FuzzerAPP sends a particular Intent to the target application, it will make the application crash