CN109190370A - A kind of Android interface similarity calculating method based on control regions distribution characteristics - Google Patents
A kind of Android interface similarity calculating method based on control regions distribution characteristics Download PDFInfo
- Publication number
- CN109190370A CN109190370A CN201810711378.0A CN201810711378A CN109190370A CN 109190370 A CN109190370 A CN 109190370A CN 201810711378 A CN201810711378 A CN 201810711378A CN 109190370 A CN109190370 A CN 109190370A
- Authority
- CN
- China
- Prior art keywords
- interface
- tree
- control regions
- similarity
- android
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 18
- 238000004364 calculation method Methods 0.000 abstract description 5
- 238000001514 detection method Methods 0.000 abstract description 3
- 206010004950 Birth mark Diseases 0.000 description 2
- 238000004458 analytical method Methods 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000013459 approach Methods 0.000 description 1
- 238000010009 beating Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 239000002360 explosive Substances 0.000 description 1
- 239000004744 fabric Substances 0.000 description 1
- 238000003780 insertion Methods 0.000 description 1
- 230000037431 insertion Effects 0.000 description 1
- 238000012856 packing Methods 0.000 description 1
- 238000012545 processing Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/55—Detecting local intrusion or implementing counter-measures
- G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
- G06F21/562—Static detection
- G06F21/563—Static detection by source code analysis
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/55—Detecting local intrusion or implementing counter-measures
- G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
- G06F21/566—Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/03—Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
- G06F2221/033—Test or assess software
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Software Systems (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Virology (AREA)
- Health & Medical Sciences (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- General Health & Medical Sciences (AREA)
- Complex Calculations (AREA)
- User Interface Of Digital Computer (AREA)
Abstract
A kind of Android interface similarity calculating method based on control regions distribution characteristics, model-control regions distribution tree of application interface information and the calculating step of interface similarity when describing Android operation including one: the view hierarchical information of application interface layout is obtained first, which can be obtained by existing third party's tool;Then the rectangular area information of each control in view level is traversed, and these rectangular areas are configured to a R tree;Using the R tree built as control regions distribution tree, the similitude at corresponding interface is determined by comparing the similarity of area of space distribution tree.The characteristics of system, is: improving to Code obfuscation and the repellence for adding these two types of anti-detection modes, improves the accuracy of the similarity calculation for mixing Android application interface.
Description
Technical field
It the invention belongs to Android application, software birthmark, beats again packet detection and applies fuzzy algorithmic approach field, and in particular to one
Android interface similarity calculating method of the kind based on control regions distribution characteristics.
Background technique
Continuous with mobile device is popularized, and explosive growth is also presented in mobile application quantity, is also therefore attracted to very
The attention of more criminals.Easily by weight packing and issuing, attackers add in beating again packet procedures, modify part generation for Android application
Code is to reach their illegal purpose.The prior art is mainly to need to answer by the software birthmark of identification application to detect Android
With packet is beaten again, the software birthmark of application is extracted by the code or interface information of analysis application.But due to nowadays answering
With the generality obscured and encrypted, the software birthmark extracted from application code will receive serious interference, therefore, more and more
Work focused on and extract birthmark from application interface, and an important link among these is how to calculate boundary
Similarity between face.And as mixing Android application is increasingly becoming the main way of nowadays Android application and development, using boundary
Face information and traditional primary Android application have biggish difference.From actually saying, there is no for mixing application at this stage
The work that interface birthmark is extracted;And for theory analysis, dynamic, typeless control properties increase processing in the part Web
Difficulty.
Summary of the invention
The present invention aiming at the shortcomings in the prior art, it is similar to provide a kind of Android interface based on control regions distribution characteristics
Spend calculation method.This method is based on following reality: the control in Android application interface always occupies a rectangular area and (includes
Position and size information), these rectangular areas constitute the skeleton at an interface, can't mistake to the part modification of this skeleton
The similarity degree at more entire interfaces of influence.Therefore, we have proposed control regions distribution tree, one is answered when running for Android
With the model of interface information.
To achieve the above object, the invention adopts the following technical scheme:
A kind of Android interface similarity calculating method based on control regions distribution characteristics, which is characterized in that including as follows
Step:
Step 1: Dynamic Execution Android application, collects user interface information;
Step 2: constructing control regions distribution tree by user interface information;
Step 3: judging the similarity between application interface by comparing the similarity of control regions distribution tree.
To optimize above-mentioned technical proposal, the concrete measure taken further include:
In step 1, interface when for Android application operation to be compared obtains the structure letter of Android application user interface
Breath.
In step 2, control regions distribution tree is a tree form data structure, the corresponding controls region of an application interface
Domain distribution tree, the control in the node and application interface of tree correspond, and each node contains the area information of corresponding control,
The area information of control refers to position and the size information for the rectangular area that control occupies on interface is presented.
Step 2 specifically includes:
Step 2.1, the view hierarchical information for obtaining application interface layout first;
Step 2.2, then in any order one by one traverse view level in the bottom control rectangular area information,
Using these rectangular areas as node, it is inserted into and is configured to a R tree;
Step 2.3, using the R tree built as control regions distribution tree.
Step 3 specifically includes:
Step 3.1, a control regions distribution tree each node contain rectangular area occupied by control position and
Size information, the similarity of rectangular area is by Jaccard distance definition;
If two rectangle r1、r2, corresponding size is s respectively1、s2, the two overlapping area is so, then the two
The similarity of rectangle are as follows:
Step 3.2 sets two control regions distribution trees as t1、t2, for t1In each rectangle ri∈t1, it acquires:
Wherein, t2In each rectangle be rj, i.e. rj∈t2;
Finally by simmSimilarity of the average value as tree, that is, the similarity at corresponding interface.
The beneficial effects of the present invention are: the function that the present invention specifically provides includes: 1, collects Android application user interface letter
It ceases and constructs control regions distribution tree;2, the similarity between Android application interface is fed back.Compared with prior art, significant special
Point is: improving to Code obfuscation and the repellence for adding these two types of anti-detection modes, improves for mixing Android application interface
Similarity calculation accuracy.
Detailed description of the invention
Fig. 1 is a kind of system block diagram of Android interface similarity calculating method based on control regions distribution characteristics.
Fig. 2 is the product process figure of control regions distribution tree.
The interface example that Fig. 3 is to provide.
Fig. 4 is the view level at interface.
Fig. 5 is the division of MBR in the R tree of the corresponding rectangular area of control and generation in interface.
Fig. 6 is the control regions distribution tree ultimately generated.
Specific embodiment
In conjunction with the accompanying drawings, the present invention is further explained in detail.
One, main process
A kind of Android interface similarity calculating method based on control regions distribution characteristics as shown in Figure 1, for than
Compared with a pair of of Android application operation when interface, we using third party's tool obtain Android application user interface structural information.
Then control regions distribution tree is converted by the included user interface structure information of each layout of application, as application interface
Feature.The similarity for finally calculating the corresponding control regions distribution tree of two Android application interfaces, for determining that application interface is
It is no similar.
Two, the generation of control regions distribution tree
Product process figure such as Fig. 2 of control regions distribution tree, detailed step are as follows:
The layout that we get all is XML format, and data structure is seen as one tree, and whole tree represents the cloth
Office level, tree node on behalf layout in corresponding control.Utilize the view of the available runnable interface layout of third party's tool
Hierarchical tree.
For each of interface control all in occupation of a rectangular area, different controls can be in these squares of different sizes
Different contents (such as color, text or picture) is drawn in shape.These controls are all the bottoms in interface view level
The case where element, corresponding rectangle is not in nested overlapping each other.We construct a R tree to store these rectangles letter
Breath, R tree are the balance multiway trees for being used for high-dimensional information index, and in the present invention, the rectangular information that we use is exactly
Two-dimensional (width and height).R tree will be adjacent using minimum boundary rectangle (Minimum Bounding Rectangle, MBR)
Object combine configuration node, and ensure that the balance of tree.Rectangle by being constantly inserted into from each control to R tree is believed
Breath, ultimately constructed R tree out is just as the control regions distribution tree at the interface.Different insertion sequences may result in different
R tree, but after not influencing control regions distribution tree similarity calculation result.
Fig. 3 illustrates an interface example, and Fig. 4 is then the view level at the interface, and each node therein is corresponding
Visible or sightless element in interface (in general, invisible element is the layout structure for organizing its daughter element,
Such as LinearLayout), we only consider leaf node element therein and corresponding rectangular information are added in R tree.
Fig. 5 is then the division of MBR in the R tree of the corresponding rectangular area of control and generation in the interface, and Fig. 6 is exactly the control ultimately generated
Part area distribution tree.
Three, control regions distribution tree similarity calculation
Each node of one control regions distribution tree contains position and the size information of rectangular area occupied by control,
The similarity of rectangular area has Jaccard distance definition: setting two rectangle r1、r2, corresponding size is s respectively1、s2,
The two overlapping area is so, then the similarity of the two rectangles are as follows:
Secondly, setting two control regions distribution trees as t1、t2, for t1In each rectangle ri∈t1, it acquires:
Wherein, t2In each rectangle be rj, i.e. rj∈t2;
Finally by simmSimilarity of the average value as tree, that is, the similarity at corresponding interface.
It should be noted that the term of such as "upper", "lower", "left", "right", "front", "rear" cited in invention, also
Only being illustrated convenient for narration, rather than to limit the scope of the invention, relativeness is altered or modified, in nothing
Under essence change technology contents, when being also considered as the enforceable scope of the present invention.
The above is only the preferred embodiment of the present invention, protection scope of the present invention is not limited merely to above-described embodiment,
All technical solutions belonged under thinking of the present invention all belong to the scope of protection of the present invention.It should be pointed out that for the art
For those of ordinary skill, several improvements and modifications without departing from the principles of the present invention should be regarded as protection of the invention
Range.
Claims (5)
1. a kind of Android interface similarity calculating method based on control regions distribution characteristics, which is characterized in that including walking as follows
It is rapid:
Step 1: Dynamic Execution Android application, collects user interface information;
Step 2: constructing control regions distribution tree by user interface information;
Step 3: judging the similarity between application interface by comparing the similarity of control regions distribution tree.
2. a kind of Android interface similarity calculating method based on control regions distribution characteristics as described in claim 1, special
Sign is: in step 1, interface when for Android application operation to be compared obtains the structure letter of Android application user interface
Breath.
3. a kind of Android interface similarity calculating method based on control regions distribution characteristics as claimed in claim 2, special
Sign is: in step 2, control regions distribution tree is a tree form data structure, the corresponding control regions of an application interface
Distribution tree, the control in the node and application interface of tree correspond, and each node contains the area information of corresponding control, controls
The area information of part refers to position and the size information for the rectangular area that control occupies on interface is presented.
4. a kind of Android interface similarity calculating method based on control regions distribution characteristics as claimed in claim 3, special
Sign is: step 2 specifically includes:
Step 2.1, the view hierarchical information for obtaining application interface layout first;
Step 2.2, then in any order one by one traverse view level in the bottom control rectangular area information, by this
A little rectangular areas are inserted into as node and are configured to a R tree;
Step 2.3, using the R tree built as control regions distribution tree.
5. a kind of Android interface similarity calculating method based on control regions distribution characteristics as claimed in claim 4, special
Sign is: step 3 specifically includes:
Step 3.1, a control regions distribution tree each node contain position and the size of rectangular area occupied by control
Information, the similarity of rectangular area is by Jaccard distance definition;
If two rectangle r1、r2, corresponding size is s respectively1、s2, the two overlapping area is so, then the two rectangles
Similarity are as follows:
Step 3.2 sets two control regions distribution trees as t1、t2, for t1In each rectangle ri∈t1, it acquires:
Wherein, t2In each rectangle be rj, i.e. rj∈t2;
Finally by simmSimilarity of the average value as tree, that is, the similarity at corresponding interface.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201810711378.0A CN109190370B (en) | 2018-07-02 | 2018-07-02 | Android interface similarity calculation method based on control region distribution characteristics |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201810711378.0A CN109190370B (en) | 2018-07-02 | 2018-07-02 | Android interface similarity calculation method based on control region distribution characteristics |
Publications (2)
Publication Number | Publication Date |
---|---|
CN109190370A true CN109190370A (en) | 2019-01-11 |
CN109190370B CN109190370B (en) | 2022-02-08 |
Family
ID=64948793
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201810711378.0A Active CN109190370B (en) | 2018-07-02 | 2018-07-02 | Android interface similarity calculation method based on control region distribution characteristics |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN109190370B (en) |
Cited By (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN110502876A (en) * | 2019-08-07 | 2019-11-26 | 南京大学 | A kind of Android interface static state based on resource file obscures method |
CN110766697A (en) * | 2019-10-16 | 2020-02-07 | 南京大学 | Method and device for identifying graphical interface control image of interface sketch |
CN111273905A (en) * | 2020-01-17 | 2020-06-12 | 南京大学 | Application retrieval method and device based on interface sketch |
CN116795346A (en) * | 2023-06-26 | 2023-09-22 | 成都中科合迅科技有限公司 | Component interface drawing method and system based on visual contrast |
Citations (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN107169323A (en) * | 2017-05-11 | 2017-09-15 | 南京大学 | Packet inspection method is beaten again in a kind of Android application based on layout cluster figure |
-
2018
- 2018-07-02 CN CN201810711378.0A patent/CN109190370B/en active Active
Patent Citations (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN107169323A (en) * | 2017-05-11 | 2017-09-15 | 南京大学 | Packet inspection method is beaten again in a kind of Android application based on layout cluster figure |
Non-Patent Citations (1)
Title |
---|
MINGSHEN SUN等: "《DroidEagle: Seamless Detection of Visually Similar AndroidApps》", 《PROCEEDINGS OF THE 8TH ACM CONFERENCE ON SECURITY AND PRIVACY IN WIRELESS AND MOBILE NETWORKS》 * |
Cited By (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN110502876A (en) * | 2019-08-07 | 2019-11-26 | 南京大学 | A kind of Android interface static state based on resource file obscures method |
CN110502876B (en) * | 2019-08-07 | 2021-04-27 | 南京大学 | Android interface static confusion method based on resource files |
CN110766697A (en) * | 2019-10-16 | 2020-02-07 | 南京大学 | Method and device for identifying graphical interface control image of interface sketch |
CN110766697B (en) * | 2019-10-16 | 2023-08-04 | 南京大学 | Method and device for identifying graphical interface control image of interface sketch |
CN111273905A (en) * | 2020-01-17 | 2020-06-12 | 南京大学 | Application retrieval method and device based on interface sketch |
CN111273905B (en) * | 2020-01-17 | 2023-04-18 | 南京大学 | Application retrieval method and device based on interface sketch |
CN116795346A (en) * | 2023-06-26 | 2023-09-22 | 成都中科合迅科技有限公司 | Component interface drawing method and system based on visual contrast |
CN116795346B (en) * | 2023-06-26 | 2024-03-15 | 成都中科合迅科技有限公司 | Component interface drawing method and system based on visual contrast |
Also Published As
Publication number | Publication date |
---|---|
CN109190370B (en) | 2022-02-08 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN109190370A (en) | A kind of Android interface similarity calculating method based on control regions distribution characteristics | |
Cerutti et al. | Understanding leaves in natural images–a model-based approach for tree species identification | |
CN109670591B (en) | Neural network training method and image matching method and device | |
US10204216B2 (en) | Verification methods and verification devices | |
CN102332034B (en) | Portrait picture retrieval method and device | |
Tsai et al. | Learning and recognition of on-premise signs from weakly labeled street view images | |
CN108305299A (en) | Use the composition image in machine learning detection composograph | |
CN102693425A (en) | Image processing apparatus and image processing method | |
CN106156237B (en) | Information processing method, information processing unit and user equipment | |
Savelonas et al. | Fisher encoding of differential fast point feature histograms for partial 3D object retrieval | |
CN110795925A (en) | Image-text typesetting method based on artificial intelligence, image-text typesetting device and electronic equipment | |
Olague et al. | Evolving head tracking routines with brain programming | |
WO2018040942A1 (en) | Verification method and device | |
Jiang et al. | Learning to transfer focus of graph neural network for scene graph parsing | |
CN109361654A (en) | A kind of method and system for negotiating encryption handling business secret based on block chain | |
Zhan et al. | Pose-normalized and appearance-preserved street-to-shop clothing image generation and feature learning | |
Onizuka et al. | Landmark-guided deformation transfer of template facial expressions for automatic generation of avatar blendshapes | |
Dang et al. | SHAPE: a dataset for hand gesture recognition | |
CN107563275A (en) | Face recognition method combined with building information model | |
CN103020651B (en) | Method for detecting sensitive information of microblog pictures | |
Ma et al. | Graph‐cut based interactive image segmentation with randomized texton searching | |
CN117218398A (en) | Data processing method and related device | |
Lv et al. | 3D Face Recognition based on Local Conformal Parameterization and Iso‐Geodesic Stripes Analysis | |
Bozkır et al. | SimiLay: A developing web page layout based visual similarity search engine | |
KR20200071798A (en) | Method, apparatus and program for reading informational pattern |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |