华为：鸿蒙生态应用安全技术白皮书V2.0会员免费优质

V2.0

版权所有 © 华为终端有限公司 2024。 保留一切权利。 本材料所载内容受著作权法的保护，著作权由华为公司或其许可人拥有，但注明引用其他方的内容除外。未经华为公司或其许可人事先书面许可，任何人不得将本材料中的任何内容以任何方式进行复制、经销、翻印、播放、以超级链路连接或传送、存储于信息检索系统或者其他任何商业目的的使用。 商标声明 以上为华为公司的商标（非详尽清单），未经华为公司书面事先明示许可，任何第三方不得以任何形式使用。 注意 华为会不定期对本文档的内容进行更新。 本文档仅作为使用指导，文档中的所有陈述、信息和建议不构成任何明示或暗示的担保。 华为终端有限公司 地址： 广东省东莞市松山湖园区新城路 2 号 网址： https://consumer.huawei.com 华为公司

O1 O2 O3 前言 鸿蒙应用生态安全模型 应用安全面临的问题与挑战 2）窃取用户数据 ····················································· 3）强制推送广告 ····················································· 4）利用漏洞攻击其他应用程序 ····························· 8 9 9 5）盗版软件 ···························································· CONTENT 1）诱导用户下载安装恶意应用 ····························· 7 10

O4 O5 O6 鸿蒙应用生态的安全目标 5）代码混淆 ························································· 应用开发安全 1）开发者注册和实名认证 ··································· 2）申请开发者证书 ·············································· 3）申请应用 Profile 文件 ····································· 17 19 18 应用发布安全 1）应用检测与审核 ············································· 2）应用加密 ························································· 3）应用签名 ························································· 22 25 25 4）代码安全检查 ·················································· 16 20

2）基础安全防护 ·················································· 1）基础安全架构模型 ··········································3）应用权限管控 ·················································· 4）隐私控制设计 ················································· 应用运行生命周期安全 O7 5）用户身份认证 ·················································6）应用数据保护 ·················································7）应用运行时安全检测 ·····································8）应用风险行为管控 ·········································9）应用扩展管理 ·······················...