Characteristic extraction method and device

Abstract

The invention discloses a characteristic extraction method and device. The characteristic extraction method comprises obtaining a group of black sample files and white sample files from an application program layer of an intelligent terminal operating system; performing resolution on every file to obtain information structures of functions contained in every file and calculating a check code of every function; determining whether the files comprise the functions corresponding to the check codes or not so as to perform statistics on the number of times of every function appearing in the black sample files and the white sample files; extracting out the black sample characteristics according to the functions which only appear in the black sample files and do not appear in the white sample files and extracting out the white sample characteristics in the same way. Accordingly, the statistics of the number of times of every function check code appearing in the files is performed through analysis and calculation on the obtained black sample files and white sample files and the functions which only appear in the black sample files and do not appear in the white sample files serve as the basis of the extraction of the black sample characteristics.

Description

Technical field [0001] The invention relates to the technical field of network security, in particular to a method and device for feature extraction. Background technique [0002] With the development of technology, smart terminals have more and more functions. For example, people's mobile phones have changed from traditional GSM and TDMA digital mobile phones to smart phones that can handle multimedia resources, provide web browsing, conference calls, e-commerce and other information services. However, the increasing variety of mobile phone malicious code attacks and the increasingly severe personal data security problems have also followed, and more and more mobile phone viruses have caused smartphone users to suffer. [0003] Mobile phone malicious code protection technology protects against malicious code. There are many ways to protect mobile phone malicious code. For example, feature value scanning methods, malicious code protection based on virtual machine technology, heu...

AI Technical Summary

Problems solved by technology

However, an increasing variety of malicious code attacks on mobile phones and increasingly serious personal data security issues have followed, and more and more mobile phone viruses have caused smartphone users to suffer.

Images