Method and system for extracting behavioral data of mobile phone software

Abstract

The invention discloses a method and a system for extracting behavioral data of mobile phone software, which belong to the field of information security technology. The method includes the steps: 1 virtualizing hardware equipment required by the target mobile phone software so as to construct a mobile phone simulator; 2 creating configuration files of the target mobile phone software; 3 analyzing the configuration files, initializing the mobile phone simulator and loading mirror images of a mobile phone operating system; 4 starting the operating system, and converting system call operations set to be intercepted into a system call instruction start address corresponding to the mobile phone operating system in the mobile phone simulator; and 5 starting the mobile phone software, judging whether the currently executed instruction address is the instruction start address obtained by the step 4 or not before a virtual processor of the mobile phone simulator executes an optional instruction, and if the currently executed instruction address is the instruction start address obtained by the step 4, suspending running of the operating system, recording the current instruction, collecting data related to system call, and then enabling the operating system to resume running. The method can be used for extracting various behavioral data of the mobile phone software in a realistic environment.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a mobile phone software behavior data extraction method and system. Background technique [0002] With the continuous development of mobile phone technology and the continuous decline in the price of smart phone terminals, mobile phone terminals represented by smart phones are becoming more and more popular. Morgan Stanley estimates that global smart phone shipments will exceed PCs in 2012. The shipment is 400 million units. With the rapid growth of smart phone users, there are more and more application software on smart phones. Due to the difficulty in extracting mobile phone software behavior data, it is difficult for users, application store providers, and operators to analyze the real behavior of mobile phone software, so that it is impossible to evaluate the security of mobile phone software, resulting in malicious mobile phone software such as mali...

AI Technical Summary

Problems solved by technology

The main defect of this method is that it requires a lot of manual participation, and the analysis speed and efficiency are very low. Moreover, because the mobile phone software operates on platforms such as ARM, its instruction set is very different from the computer's x86 platform, and the requirements for analysts are very high. high

Images