Method and system for comprehensively detecting advertisement plug-in based on multi-features

Abstract

The invention discloses a method and device for comprehensively detecting an advertisement plug-in based on multi-features. A compressed APK installation package is uncompressed, and configuration files, resource files and executable files all of which are obtained after the APK is uncompressed are analyzed. The features are extracted regarding to the analysis result of the configuration files, the analysis result of the resource files and the analysis result of the executable files respectively. After the extracted features are synthesized, the matching process is carried out on the extracted features and an advertisement plug-in feature library. If the matching degree between the extracted features and any record in the advertisement plug-in feature library reaches a preset value, the APK installation package contains the advertisement plug-in, and the record advertisement plug-in name in the advertisement plug-in feature library is output. Otherwise, the APK installation package does not contain the advertisement plug-in. Therefore, the method is high in heuristic detecting capacity and capable of detecting the advertisement plug-in of an android platform comprehensively and in time.

Description

technical field [0001] The invention relates to the technical field of mobile terminal security, in particular to a multi-feature-based comprehensive detection method and system for advertising pieces. Background technique [0002] With the trend of smart mobile terminals, mobile Internet services are emerging one after another, placing advertisements on mobile terminals has become the goal of many businesses, and the business opportunities that may be brought about by this are becoming more and more obvious. Since the user can easily download the required software program, the security of the software program is difficult to determine. There are many problems in transplanting the traditional adware detection and killing method to the mobile terminal: First, there are various operating systems on the mobile terminal, such as android, ios, windows, symbian, etc., the software program installation packages of each platform are different, and the security mechanism of each plat...

AI Technical Summary

Problems solved by technology

Since the user can easily download the required software program, the security of the software program is difficult to determine

There are many problems in transplanting the traditional adware detection and killing method to the mobile terminal: First, there are various operating systems on the mobile terminal, such as android, ios, windows, symbian, etc., the software program installation packages of each platform are different, and the security mechanism of each platform is different. The difference is very large. If you use a unified method of detecting and killing adware, the effect can be imagined; secondly, advertisements are now one of the most important sources of profit for the domestic mobile Internet. the interests of a considerable number of people

Compared with other terminal platforms, the Android platform has many differences. Among them, when installing a software program on the Android platform, the Android platform gives a lot of decision-making power to the user. The user decides whether a program can perform related operations and requires the developer to use the API. It is called permission when using some sensitive APIs, which can give users risk warnings during installation. However, users who do not have certain security knowledge cannot make the right choice, and it is very easy to install software programs containing advertisements.

Images