A Privacy Leak Detection Mechanism based on Service Binding

With the development of mobile technology, users gradually store financial information and personal privacy data on mobile terminals, which makes mobile security particularly important. In order to effectively improve the detection speed of application privacy leaks, this paper proposes a concept of service binding, binding a minimum privacy permission set for each service provided by the application. Use the service binding concept to make the static analysis phase track only the sensitive data flow paths between APIs that apply the service's privacy permissions. In order to make up for the lack of static analysis to predict the behavior of application privacy leakage, this paper proposes a static analysis that effectively combines machine learning algorithms, abstracts the path characteristics of the static data streams obtained from static analysis into feature vectors, and further uses machine learning algorithms for learning classification. The experimental demonstration and performance analysis results show that the privacy leak detection mechanism based on service binding has faster detection speed and higher accuracy than FlowDroid.