A method and device for locating suspected mobile phone malware

Abstract

The embodiment of the invention discloses a method and a device for locating suspected mobile phone malware, which are used to improve the pertinence of locating suspected mobile phone malicious software without user participation. The method includes: according to the suspicious behavior screening rules, carry out rule matching, analysis and statistics on the mobile phone user's online log retained in the online log server, and filter out the suspicious user's online behavior log; combine the suspicious user's online behavior log with the mobile gateway Correlate the IP allocation log of the mobile Internet Internet Protocol to obtain the suspected infected user's mobile phone; obtain the mobile phone software downloaded by the suspected infected user's mobile phone within a preset time, and the preset time is recorded in the suspicious user's online behavior log A period of time before the suspicious user's online behavior; analyze the downloaded mobile phone software, and locate the suspected mobile phone malware, so that the virus analysis tool can judge whether there is malicious behavior on the suspected mobile phone malware.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a method and device for locating suspected mobile phone malicious software. Background technique [0002] With the evolution of wireless networks, the rapid growth of mobile data services, and the intelligence of mobile terminals, the mobile Internet has developed rapidly, and mobile broadband has gradually replaced fixed-line broadband to occupy a dominant position. Various data services, such as browsing news, sending and receiving multimedia messages, sending and receiving emails, online payment, chatting, games, etc. [0003] However, with the development of the mobile Internet, the mobile phone malware industry has also risen, attracting or tempting users to download and install through malicious software, and then obtain the private information of mobile phone users, which has caused serious information security threats to mobile phone users. [0004] In order to pr...

AI Technical Summary

Problems solved by technology

The inventors of the present invention found in the process of realizing the present invention that this method of the prior art needs to crawl massive network data, and the analysis workload is heavy, and the analysis is not targeted, and the efficiency of finding mobile phone malware very low

Images