https://www.clearsec.org/wikis/ise/ises/25_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8%E5%AE%89%E5%85%A8/Recent content in 移动应用安全 on ClearSec WikiHugozh-cnFri, 15 Nov 2024 09:44:26 +0800https://www.clearsec.org/wikis/ise/ises/25_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8%E5%AE%89%E5%85%A8/25_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8/Fri, 15 Nov 2024 09:44:26 +0800https://www.clearsec.org/wikis/ise/ises/25_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8%E5%AE%89%E5%85%A8/25_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8/<h3 id="移动应用组成">移动应用组成</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A725_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8/6581a6adcc515635925b00f292394f06_MD5.png" alt=""></p> <h3 id="移动应用安全威胁">移动应用安全威胁</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A725_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8/f09aaede1ec5638cc94aa5ce317bc9f8_MD5.png" alt=""></p> <p>恶意代码：恶意扣费、隐私窃取、远程控制、欺诈、系统破坏、恶意传播</p> <h3 id="安卓系统架构">安卓系统架构</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A725_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8/8db591be939b224115dac89ff1c34732_MD5.png" alt=""></p> <h3 id="安卓系统安全与保护机制">安卓系统安全与保护机制</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A725_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8/c594742de95077669f251bfba12da1ce_MD5.png" alt=""></p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A725_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8/af407bb56ccaaa1533a8855f13d61c7f_MD5.png" alt=""></p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A725_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8/f72f767e5078b232ddc228d7f789111d_MD5.png" alt=""></p> <p>地址空间布局随机化就是为了防止缓冲区溢出。</p> <p>文件系统安全就是严格限制文件的ACL权限</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A725_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8/41c344f8134e1585073609a59bc96565_MD5.png" alt=""></p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A725_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8/db91b736af5a3773df28f163c0c32ca2_MD5.png" alt=""></p> <h3 id="ios系统组成">IOS系统组成</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A725_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8/ef9366b6077357b3c1714d4463baea66_MD5.png" alt=""></p> <p><strong>层次背一下</strong></p> <h3 id="ios安全机制">IOS安全机制</h3> <p>固件（ROM）</p> <p>安全启动链-对组件和硬件进行完整性校验-例如 换第三方内存不给启动。</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A725_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8/c9d2a664b8360141f4ef05e9425b6327_MD5.png" alt=""></p> <h3 id="app加固">APP加固</h3> <p>APP安全加固-防反编译、防调试、防篡改、防窃取。</p> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A725_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8/3f13b14d1bc24845ab45126c4237f2b8_MD5.png" alt=""></p> <h3 id="智能卡">智能卡</h3> <p><img src="https://www.clearsec.org/wikis/_resources/%C2%A725_%E7%A7%BB%E5%8A%A8%E5%BA%94%E7%94%A8/3eb630171a861e255e0d0ff393f91e69_MD5.png" alt=""></p>