Method and system for monitoring application program of mobile device

Abstract

The invention provides an application method and a system for monitoring an android operating system. The method includes the steps of establishing a simulation system service, and building a relation with a function which manages an I / O channel of a device in a device driver, intercepting the data of the function sent by the application to the device driver, wherein the function manages the I / O channel of the device in the device driver, replacing the system service requested by the application of the device driver with a corresponding simulation system service according to the intercepted data, recording requests received by the simulation system service and transmitting the requests to an analysis module to analyze. The application method and the system for monitoring the android operating system have the advantages that the intercepted system requests are intercepted during the Binder communication transmission process of the system, the method and the system use the simulation system layer service to analyze behavior features of the application in the android operating system without interference the normal operation of the application compared with other application program interface (API) intercepting technology.

Description

technical field [0001] The invention relates to the field of communication security. Specifically, it relates to a method and a system for monitoring the operation of an application program in an Android operating system. Background technique [0002] Mobile devices, such as smartphones, tablets, etc., have become the mainstream platform for application development and gave birth to the mobile software and Internet industries. With the development of the mobile communication industry, users of mobile devices have greater freedom to select and install application software, so that the experience of using the mobile device is more in line with individual needs. However, in the mobile application ecosystem, in addition to harmless mobile application software, users cannot avoid exposure to virus programs or harmful software containing virus programs. The difference between the mobile application platform and the traditional PC desktop operating system is that the mobile appli...

AI Technical Summary

Problems solved by technology

But the limitation of this technology is that it cannot keep up with the development of mobile applications

With the gradual improvement of the processing power of mobile devices, the capacity of mobile applications is also increasing. Although the analysis on the server side will not waste the resources of the processor computing power of the mobile device, the data transmission of large programs needs to occupy the mobile device. wireless transmission traffic, which wastes a certain amount of time and may consume the user's traffic charges

In addition, this processing can only work when the program is installed or when all applications are scanned, and there is no restriction on the operation of the installed applications.

[0004] To sum up, the existing technologies cannot efficiently monitor the operation of mobile applications in real time, or their technical means rely on server-side operations, and need to rely on known viruses and malware libraries, and often for new malware and The inability of the virus to produce an effect has created limitations in the application of the technology

Images