关键词: Android应用, 静态分析, 安全缺陷, 安全漏洞, 访问者模式

Abstract: With the rapid development of mobile Internet, the number of smart phone users is increasing, especially Android smart phone users, and the security flaws of Android application security abound. Android application security flaws are divided into three, including vulnerabilities flaws, components flaws and configuration flaws. Focusing on these security flaws, first the bytecode file is static analysis, then the resolution Android bytecode as an inspection vehicle, it uses the visitor pattern to design detector for each species vulnerability. Finally, part of the code is achieved. Practice has proven able to meet the Android application security flaws static inspection requirements.

Key words: Android application, static analysis, security flaws, security vulnerabilities, visitor pattern