Android privilege escalation attack detection system and method based on cloud platform

Abstract

The invention discloses an android privilege escalation attack detection system and method based on cloud platform, which comprises the following steps: a cloud end downloads application programs from an application market and adds into an application program information database by using the crawler program, the application market comprises an official market and a third-party market, and formulates the security policy according to known privilege escalation attack sample, the cloud end classifies the application programs according to the security policy, the mobile terminal initializes the classified application program database and judges whether the application programs have update operation, if yes, the mobile terminal judges the type of the update operation is installation operation or un-installation operation, and the mobile terminal updates the classified application program database and the program privilege database directly or according to the result sent by the cloud end. By adoption of the method disclosed by the invention, the problem that the detection operation which wastes time and resource is performed every time when invoking the ICC (inter-component communication) is avoided.

Description

technical field [0001] The invention belongs to the fields of computer security and mobile security, and more specifically relates to a system and method for detecting an Android privilege elevation attack based on a cloud platform. Background technique [0002] In recent years, smart terminals have been widely popularized around the world, especially the smart terminals represented by Google's Android system and Apple's iOS system. According to Gartner's report, in the first quarter of 2012, mobile phones with Android and iOS systems accounted for 79% of the total global smart phone market, of which mobile phones with Android system accounted for 56%. Due to the high market share of Android and the open source code of the system, this patent is aimed at mobile terminals with the Android system which are more popular at present. With the popularity of Android smart terminals, malicious codes targeting Android systems are also increasing. According to the latest Kaspersky co...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the defects of the prior art, the object of the present invention is to provide a cloud platform-based Android privilege escalation attack detection system, which uses the powerful computing power of the cloud platform to solve the problem of insufficient terminal capabilities, and pre-configures the system according to the strategy defined by the administrator. Classify the application software, so as to avoid the time-consuming and resource-consuming detection operation of the terminal every time ICC (inter-component communication) is called

Images