Unlock instant, AI-driven research and patent intelligence for your innovation.

Method and device for detecting whether installation package is packaged repeatedly or not

A secondary packaging and installation package technology, applied in the computer field, can solve the problems of low technical threshold, flooding, secondary packaging of installation packages, etc.

Active Publication Date: 2015-01-28
BEIJING QIHOO TECH CO LTD
View PDF3 Cites 20 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] However, in the existing technology, netizens cannot judge whether the installation package has been repackaged before installing it, and there are mature secondary packaging tool

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device for detecting whether installation package is packaged repeatedly or not
  • Method and device for detecting whether installation package is packaged repeatedly or not
  • Method and device for detecting whether installation package is packaged repeatedly or not

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0072] An embodiment of the present invention provides a method for detecting whether an installation package has been packaged twice. This method can determine whether the specified installation package file has been packaged twice, thereby preventing the user from being threatened by security or advertising harassment due to the installation of the file packaged twice, and can also provide a reference for scanning and killing malicious programs. The method can be implemented in the background of a computer through a detection tool, such as a PC and various servers.

[0073] figure 1 It is a flow chart of a method for detecting whether an installation package is repackaged according to an embodiment of the present invention, and the method includes steps S102 to S106.

[0074] S102. Parse the binary file of the specified part in the specified installation package to obtain the first ranking of the structures in the binary file.

[0075] S104. Detect whether the first sortin...

Embodiment 2

[0080] This embodiment is a specific application scenario of the first embodiment above. Through this embodiment, the method provided by the present invention can be described more clearly and specifically. In this embodiment, an example of detecting a randomly collected specified installation package file and judging whether it is a second-packaged installation package is used as an example for illustration.

[0081] In order to help illustrate the embodiment of the present invention, first, the installation package of the application program is described as follows:

[0082] In an embodiment of the present invention, the installation package will include the following information: package name, version number, developer signature, characteristics of the Android component receiver, characteristics of the Android component service, and characteristics of the Android component activity of the installation package of the application program. Instructions or character strings in ...

Embodiment 3

[0155] Figure 4 It is a structural block diagram of a device for detecting whether an installation package has been packaged twice provided by an embodiment of the present invention. The device 400 includes:

[0156] The parsing module 410 is adapted to parse the binary file of the specified part in the specified installation package to obtain the first order of the structure in the binary file;

[0157] The sorting detection module 420 is adapted to detect whether the first sorting is the same as the second sorting, wherein the second sorting is the sorting of the structure generated after the secondary packaging tool compiles the specified part of the installation package;

[0158] The first determination module 430 is adapted to determine that the specified installation package is a file after secondary packaging when the first sorting is the same as the second sorting.

[0159] Optionally, parsing module 410 includes:

[0160] The decompression unit 411 is adapted to d...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention provides a method and a device for detecting whether an installation package is packaged repeatedly or not. The method comprises the following steps of analyzing a binary file of a specified portion in a specified installation package to obtain a first sequence of structural bodies in the binary file; detecting whether the first sequence is the same with a second sequence or not; and determining that the installation package is a file which is packaged repeatedly if the first sequence is the same with the second sequence. The second sequence is a sequence of structural bodies which are generated after the specific portion of the installation package is compiled by a repeated packaging tool. By the method and the device, whether the installation package is repeatedly packaged by the repeated packaging tool or not can be detected; when a user installs a program, the device can remind the user that the file is packaged repeatedly and is threatening, or the file can be stored in a feature library of a virus scanning tool, the file which is packaged repeatedly is scanned preferentially, and the searching and killing efficiency and the accuracy of the virus scanning tool are improved.

Description

technical field [0001] The invention relates to the field of computers, in particular to a method and device for detecting whether an installation package has been packaged twice. Background technique [0002] At present, mobile terminals such as mobile phones and tablet computers are more and more widely used, and more and more APPs (Applications, application programs) are developed based on mobile terminals. Moreover, there are many application markets on the Internet now, all of which can provide APP downloads. [0003] Due to the existence of numerous application markets, the management of APP is very chaotic. Therefore, some malicious developers start to repackage the APP installation package (such as apk file) and release it again. [0004] Specifically, secondary packaging means that the malicious developer gets the genuine installation package of the APP, decompiles it, adds advertisements, malicious codes, etc., packages it again into an installation package, and ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): G06F9/44G06F21/10
Inventor 路轶
Owner BEIJING QIHOO TECH CO LTD