Mobile terminal, and system and method for suspicious behavior detection and judgment

Abstract

The invention provides a mobile terminal which comprises a malicious behavior feature model base used for storing malicious behavior models; a sensitive resource monitoring module used for monitoring access of an application program to sensitive resource; an application behavior acquisition module used for acquiring a corresponding sensitive behavior according to monitored behavior data; an application behavior database used for storing the sensitive behavior; an application behavior analysis center used for receiving the sensitive behavior, invoking the malicious behavior models in the malicious behavior feature model base and judging whether a behavior corresponding to the sensitive behavior is a malicious behavior; and an application security center used for querying the sensitive behavior, sorting application program accesses corresponding to the sensitive behavior in order of malicious degree and setting warning levels of the application program accesses. The invention further provides a suspicious behavior detection and judgment system and a suspicious behavior detection and judgment method. The mobile terminal, the suspicious behavior detection and judgment system and the suspicious behavior detection and judgment method of the invention have the advantage of being capable of providing safety guarantee for application programs and preventing and monitoring malicious behaviors.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to a mobile terminal, suspicious behavior detection and determination system and method. Background technique [0002] With the increasingly powerful functions of mobile smart terminals, the number of mobile smart terminal application software has increased sharply, and the number of mobile smart terminal users has increased rapidly. But what follows is that there are more and more applications with malicious behaviors, which is hard to detect. The malicious behaviors of these applications mainly include: maliciously deducting fees or consuming packages, stealing user privacy data, downloading software online without prompting, spreading malicious software in large quantities, etc. How to prevent these malicious programs has become an urgent problem to be solved. [0003] The techniques for resource access control of existing applications by each mobile operating sy...

AI Technical Summary

Problems solved by technology

[0013] (2) For users, the permission granularity is too small and difficult to use

However, a behavior that damages the interests of users requires access to several sensitive resources in a certain order in many cases, so allowing users to understand and control the behavior of applications through permissions will bring certain difficulties to users.

For users, the granularity of application operations represented by permissions is too small to reflect a complete behavior of the application

[0014] (3) For resource protection, the granularity of permissions is too large to allow separate control of more refined sensitive resource classifications

Images