A method, device and system for detecting data leakage

Abstract

The invention provides a data leakage detection method, device and system. The method comprises the steps that when data leakage is detected during operation of an application, leakage characteristics and operation results of the application are obtained, the leakage characteristics and the operation results of the application are stored and are sent to a mobile terminal, and the mobile terminal obtains data corresponding to identification and a version number of the application from a server; under the circumstance that the leakage characteristics and the operation results of the application are obtained, operation characteristics of the application are obtained; the leakage characteristics and the operation characteristics of the application are compared, and if the leakage characteristics are the same as the operation characteristics of the application, the operation results are displayed to a user, and therefore stain tracking is achieved on the mobile terminal; the detection method based on stain tracking is carried out on the server, and usability of the data leakage detection technique is improved and calculation expenses are reduced under the precondition that the accuracy rate is guaranteed.

Description

technical field [0001] The present invention relates to the communication field, in particular to a method, device and system for detecting data leakage. Background technique [0002] Since most of the application software is not open source, some static analysis techniques cannot be applied. The main existing dynamic analysis technique is to recompile the Android operating system so that it can track the tainted data. If the data is sent out through the network, the user will be prompted. The whereabouts of the data, the disadvantage of this method is that it is not easy to use, the operating system needs to be recompiled, ordinary users cannot use it, and the calculation cost is relatively large. In addition, the purpose of monitoring sensitive behaviors is achieved by repackaging application software. The disadvantage is that repackaging application software may cause new risks, and some software cannot be repackaged successfully. [0003] In the prior art, the method fo...

AI Technical Summary

Problems solved by technology

The disadvantage of this method is that the accuracy rate is low, and only a single data access behavior can be monitored, and it is impossible to effectively judge whether the access will cause data leakage, that is, whether the data will be sent through the network, so the false positive rate is high

[0004] The detection method based on taint tracking consumes mobile phone resources, has a large overhead, and is not easy to run on the user's mobile phone

Images