Method and device for detecting safety performance of application program

Abstract

The embodiment of the invention provides a method and device for detecting the safety performance of an application program. The method includes the steps of obtaining program characteristics from the application program to be detected, wherein the program characteristics at least include the code structure characteristics and / or the file structure characteristics; matching the program characteristics with standard program characteristics, and determining the safety performance of the application program according to the matching result. By means of the scheme, the program characteristics are obtained from the application program to be detected, the important characteristics including the code structure characteristics and / or the file structure characteristics can be obtained, the program characteristics and the standard program characteristics are matched, the safety performance of the application program to be detected can be determined according to the matching result including successful matching, failed matching or the characteristic contact ratio and the like, whether codes are changed or not or whether malicious codes are added or not and whether files are replaced or not can be detected by matching the program characteristics, and therefore whether the application program to be detected is piratical or not can be fundamentally detected through the code structure characteristics and / or the file structure characteristics.

Description

technical field [0001] The embodiments of the present invention relate to software security technologies, and in particular, to a method and device for detecting the security of an application program. Background technique [0002] Take the Android (Andorid) application program as an example. The Andorid platform is currently a popular Linux-based open source operating system in the world, and is mainly used in mobile terminals such as mobile phones and tablet computers. Android platform is composed of operating system, middleware, user interface and application software. Android application refers to application software under Android platform. The openness of Android applications has enabled the rapid development of the applications themselves. However, due to the lack of a strict audit mechanism and an effective application authentication mechanism in the Android operating system itself, various hidden dangers have been brought, one of which is the pirated application. f...

AI Technical Summary

Problems solved by technology

The openness of Android applications has enabled the rapid development of the applications themselves. However, due to the lack of a strict audit mechanism and an effective application authentication mechanism in the Android operating system itself, various hidden dangers have been brought, one of which is the pirated application. flood

[0003] Pirated applications will bring various problems: a large number of "ad-free" versions cause developers to suffer economic losses, so that genuine application developers cannot profit from developing applications; more seriously, a large number of malicious The program pretends to be a genuine application to trick users into downloading, and implants malicious code in it, which can steal users' private information or infect their mobile phones, causing users to suffer huge economic losses

[0005] The security detection technology of the above application program has the following defects: because the pirated application program modifies the package name of the original application program, or takes some approximate application name, the detection rate of the pirated application program is low

Images