Shulou(Shulou.com)06/03 Report--

/ 1 /

Software permissions

1) deduction risk: including sending text messages, making phone calls, connecting to the network, etc.

2) risk of privacy disclosure: including access to mobile phone information, contact information, etc.

3) check the input validity check, authentication, authorization, sensitive data storage and data encryption of App.

4) restrict / allow access to the Internet using mobile phone functions

5) restrict / allow the use of mobile phones to send and receive messages

6) restrict / allow applications to register automatic startup applications

7) restrict or use local connections

8) restrict / allow the use of mobile phones to take pictures or record audio

9) restrict / allow the use of mobile phones to read user data

10) restrict / allow the use of mobile phones to write user data

11) detect App user authorization level, data leakage, illegal authorized access, etc.

/ 2 /

Install and uninstall security

1) the application should be installed correctly on the device driver

2) the corresponding icon of the application can be found on the installation device driver

3) whether it contains digital signature information

4) all managed properties and their values contained in the JAD file and JAR package must be correct

5) the data content displayed by the JAD file should be consistent with that displayed by the application program.

6) the installation path should be able to specify

7) without the user's permission, the application cannot be set to start automatically in advance

8) whether it is safe to uninstall and whether all the files installed are uninstalled

9) whether there is a prompt to uninstall the files generated during the use of the user

10) whether the modified configuration information is restored

11) whether the uninstall affects the functionality of other software

12) Uninstall should remove all files

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.