A virtualized detection system and detection method for mobile Internet botnet

Abstract

The invention provides a virtualization detection system and detection method for a mobile internet Botnet so as to solve the problem of a mobile terminal due to insufficient computing resources effectively. The system is divided into a network side and a mobile side; by means of the network side formed by a server with strong computing resources and a database, suspicious SMS and GPRS information can be captured from the mobile side, and true processing result can be obtained through the mirror image processing of a mobile platform, and thus communication is realized in the manner of a conversion gateway and a mobile internet. A detection module of the mobile terminal carries out intercept on the suspicious information based on black and white lists; and the conversion gateway is utilized to send the information to the network side. A network side monitoring and control unit schedules an appointed mirror image document for virtual machine running, and dynamic analysis and detection are carried out on data sent from the conversion network, and the detection result is fed back in time through the conversion network.

Description

technical field [0001] The invention relates to a virtualization detection system and detection method for mobile Internet Botnet, which belongs to the security category of mobile Internet, and is mainly used for realizing the detection and prevention of increasingly serious Internet Botnet (botnet). Background technique [0002] The rapid development of the mobile Internet has led to a rapid increase in the penetration rate of smart mobile terminals, and at the same time, it has also brought about the emergence of corresponding security issues. Compared with the traditional network, the mobile Internet has some different characteristics: as the main carrier, the intelligent mobile terminal is affected by the CPU and storage space, and its computing power is relatively weak. The system running on it is simpler in structure than the traditional computer system. Therefore, there are fewer remote attacks, and instead the harm caused by various malicious codes; smart mobile term...

AI Technical Summary

Problems solved by technology

[0008] The technical problem of the present invention is to overcome the deficiencies of the existing technologies, provide a virtualized detection system and detection method for mobile Internet Botnet, effectively solve the problems caused by insufficient computing resources of mobile terminals, and use resources of mobile terminals and background servers Combined, it can effectively detect the Botnet code implanted in the mobile terminal, and at the same time control the influence of Botnet within the scope of virtualization, effectively ensuring the normal operation of the mobile network

Images