The invention provides an application
access control method based on
system call limitation, relates to the technical field of
network security, and provides an application
behavior learning module and an application
authority control module. The application
behavior learning module executes the following steps: A1, creating an application behavior
list; a2, dynamic
training monitoring: training and monitoring each item of content in the application behavior
list; a3, generating a mapping table, and establishing a mapping relation between each item of content in the application behavior
list and
system calling; the application
authority control module executes the following steps: B1, user
authorization application: initiating an application access request to an
authorization center; b2,
authorization approval: after receiving the application access request, the authorization center authorizes the application as required; and B3, issuing the authority. According to the method, the
granularity of authority management is refined, the
exposure surface of the application is reduced, enterprises are guaranteed, the malicious behavior risk is reduced, the
system security and data privacy are protected, and the overall security is improved.