Suspected mobile phone malicious software positioning method and device

Abstract

The embodiment of the invention discloses a suspected mobile phone malicious software positioning method and device which are used for improving pertinence to positioning of suspected mobile phone malicious software and do not need participation of a user. The method comprises the following steps: mobile phone user internet access logs remaining in an internet access log server are subjected to rule matching and analytic statistics according to suspicious act screening rules, and suspicious user internet access act logs are screened out; the suspicious user internet access act logs are associated with mobile internet internetwork interconnection protocol (IP) allocation logs stored in a mobile gateway to obtain a suspected infected user mobile phone; mobile software downloaded by the suspected infected user mobile phone within a preset time period is acquired, wherein the preset time period is a period before a suspicious user internet access act recorded in the suspicious user internet access act logs; the downloaded mobile software is analyzed to position the suspected mobile phone malicious software, and therefore whether the suspected mobile phone malicious software has malicious acts can be judged through a virus analysis tool.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a method and device for locating suspected mobile phone malicious software. Background technique [0002] With the evolution of wireless networks, the rapid growth of mobile data services, and the intelligence of mobile terminals, the mobile Internet has developed rapidly, and mobile broadband has gradually replaced fixed-line broadband to occupy a dominant position. Various data services, such as browsing news, sending and receiving multimedia messages, sending and receiving emails, online payment, chatting, games, etc. [0003] However, with the development of the mobile Internet, the mobile phone malware industry has also risen, attracting or tempting users to download and install through malicious software, and then obtain the private information of mobile phone users, which has caused serious information security threats to mobile phone users. [0004] In order to pr...

AI Technical Summary

Problems solved by technology

The inventors of the present invention found in the process of realizing the present invention that this method of the prior art needs to crawl massive network data, and the analysis workload is heavy, and the analysis is not targeted, and the efficiency of finding mobile phone malware very low

Images