Mobile terminal, and method and device for identifying malicious advertisements in mobile terminal

Abstract

Provided are a method, device, and mobile terminal for identifying malicious advertisements in a mobile terminal, and a storage medium. The method comprises the following steps: obtaining an application program running in a mobile terminal; monitoring a notification bar of the mobile terminal to determine notification information corresponding to the application program; and, according to the frequency of appearance of the notification information and/or the content of the notification information, determining whether the application program displays malicious advertisements. The present method determines the notification information corresponding to an application program by monitoring the notification bar of the mobile terminal, and determines whether the application program displays malicious advertisements according to the frequency of appearance of the notification information and/or the content of the notification information, thereby accurately identifying application programs capable of displaying malicious advertisements, effectively compensating for the deficiencies of determining malicious advertisements by extraction code feature matching technology, and increasing the efficiency of malicious advertisement identification.

Description

technical field [0001] The invention relates to the technical field of mobile security, in particular to a method, device and mobile terminal for identifying malicious advertisements in a mobile terminal. Background technique [0002] With the rapid development of the mobile Internet and the gradual popularization of mobile terminals, viruses in mobile terminals are becoming more and more rampant. Malicious advertisements account for a large part of malicious software behaviors in operating systems of mobile terminals at present, which usually cause loss of a large amount of user traffic and interfere with normal use of users. [0003] At present, the identification method of malware in a mobile terminal usually first decompiles it into plain text code, and then judges whether it has malicious behavior by extracting code features. [0004] After analyzing the prior art, the inventor found that there are at least the following problems in the prior art: the identification ef...

AI Technical Summary

Problems solved by technology

[0004] After analyzing the prior art, the inventor found that there are at least the following problems in the prior art: the identification efficiency of malicious software is low, and along with the code confusion and confrontation of malicious advertisements, virus creators en

Images