The paper states the principles and characteristics of the Virtual Private Network (VPN) connection built under Android platform, analyzes whether VPN application has potential security risks by combining static analysis with dynamic verification, and introduces the detection result.