A mobile phone virus identification and control method, device and system

Abstract

The invention relates to a cellphone virus recognition and control method, device and system. Cellphone virus recognition and control is deployed at network nodes, the traditional method of installing virus recognition and control terminals on cellphones is avoided, cellphone virus recognition and cellphone virus central control are achieved, transparency to personal users is available, and work of organizations to allow safety of mobile equipment is greatly reduced. Meanwhile, by providing a virus feature library and an application behavior feature library, false alarm rate is greatly reduced, defects of traditional schemes are overcome, and user experience is improved.

Description

【Technical field】 [0001] The invention mainly relates to the technical field of identifying and controlling mobile phone viruses and malicious software on the mobile Internet. 【Background technique】 [0002] Existing virus scanning and killing schemes for mobile phones are basically terminal virus killing methods. It is to install the client on the terminal of each mobile phone user. The client contains various functions, the most important of which are two: one is to integrate the pre-collected virus signature library, when the network behavior of the mobile phone conforms to the prior virus definition , then identify the virus and execute the matching control action; the other is the feedback and upload action of suspicious behavior. When it is not included in the predefined signature database but meets certain trigger conditions, the specified behavior information can be sent to Upload and feed back to the mobile phone antivirus solution provider, and after its analysis,...

AI Technical Summary

Problems solved by technology

[0006] Existing mobile terminal virus solutions have the following defects: first, a client needs to be installed on the mobile terminal, which will occupy more computing and network resources of the client and reduce the usability of the user's mobile device; Terminals may also be unable to obtain consistent identification and control effects due to out-of-sync virus databases, which impairs user experience; more importantly, for a large range of user groups, installing a client on each terminal will be a huge problem. An extremely cumbersome problem, installation and maintenance are very troublesome, and users who have not installed it will be left out of the protection, which is likely to pose a greater threat to the security of mobile devices in the entire organization because of the missed users; finally, The current anti-virus solutions only collect virus samples and suspicious samples, and the high false alarm rate causes troubles to users, making it impossible to gain the trust of users for a long time.

Images