关键词: SQL注入, 静态检测, 污点分析, 合法性检查

Abstract: The number of Android terminals and applications has been increasing in recent years with the rapid     development of mobile Internet, which greatly changes people's life. However, mobile applications are complicated to interact, difficult to debug, and their versions update frequently. Many applications have been published without adequate testing, which makes failures caused by various vulnerabilities in Android applications occur frequently. SQL (structured query language) injection is a kind of common security vulnerability, which can cause user information leakage and database to be tampered maliciously. However, general static analysis tools cannot detect SQL injection vulnerabilities in Android applications effectively. Aiming at this problem, this paper analyzes the code and data characteristics of SQL injection vulnerabilities, and puts forward a static detection approach based on taint analysis. It extends the open source tools FindBugs, and implements the prototype tool SQLInj. The experimental results indicate that this approach can detect the SQL injection vulnerabilities in Android applications effectively.

Key words: SQL injection, static detection, taint analysis, legitimate check